NEAS[.]07fd30874613a286e5a84e63633fda70_JC[.]exe | Triage

Sharing

General

Target

NEAS.07fd30874613a286e5a84e63633fda70_JC.exe
Size

654KB
MD5

07fd30874613a286e5a84e63633fda70
SHA1

ac1529463a0dc2090c79b2ce6bf7bb8161aaa4a2
SHA256

2a2b5a825e0b7927a7808a43a8d5490d051d86ea47e09ba88349436d0cf1efc0
SHA512

c5776eb9f9004fd2519813ecb335db67035ef3e4fa1ae3c5dec5a957c0c0c10a5669e323af6d1d5d7830816961263a3f924518f90a9240db41bb69f3958b02a4
SSDEEP

12288:/dbIBXHHlXc3Iu+laqfBXHHFXc3uuN2I:lbIZHlXc3IRlTfZHFXc3uK2I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.07fd30874613a286e5a84e63633fda70_JC.exe

Files

NEAS.07fd30874613a286e5a84e63633fda70_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 349KB - Virtual size: 348KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 304KB - Virtual size: 304KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ