NEAS[.]02280a68a84170d10213adc020b6c650_JC[.]exe | Triage

Sharing

General

Target

NEAS.02280a68a84170d10213adc020b6c650_JC.exe
Size

436KB
MD5

02280a68a84170d10213adc020b6c650
SHA1

d1eb0aa30e2c2ba64977d06f229cd50995d79567
SHA256

1857ec17accddbe9dafa8b21a98600d6c9ee55266813b3267a79668ef3e5b38f
SHA512

224a65ac00e8346997d666063947027541387cebf58d546592017ad99c93028590cd985ef4bc1a5b7ebe38618e3bcf12c6088d6931562c32d0b0026b2781fb28
SSDEEP

12288:2Av1jdoW/RooPwvUOnNl268weRBwS1gYh23f2f:j1JbodUqlteRBJgYhYW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.02280a68a84170d10213adc020b6c650_JC.exe

Files

NEAS.02280a68a84170d10213adc020b6c650_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 728KB - Virtual size: 727KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 30.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xem
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jogu
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ