NEAS[.]035d02256978c4252a4d38a992ae64e0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.035d02256978c4252a4d38a992ae64e0_JC.exe
Size

2.1MB
MD5

035d02256978c4252a4d38a992ae64e0
SHA1

811f5a5f339a2a97b3041f15551bf7aa41817578
SHA256

5db312d1d7a2bb702dee46bbb2a830cb2b59617731d9ff2ed95d56eaa101091f
SHA512

3c2ea206ebc5a06656230968465c42ebd7b2f58dfd9034e8cb240060ee8dfa8055380e9245c7d0cb75fa0fe0a248fc5bced537e7f04b76b0db86ba3a6a55d231
SSDEEP

12288:sQaGrWsrhX6kf3XWRiRquPMaLi6rAyIQjY:sQaGrW8vf3mRzuPv0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.035d02256978c4252a4d38a992ae64e0_JC.exe

Files

NEAS.035d02256978c4252a4d38a992ae64e0_JC.exe
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 392KB - Virtual size: 391KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 470KB - Virtual size: 472KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE