NEAS[.]0bb3ccf16acce19c0425f1c837584820_JC[.]exe | Triage

Sharing

General

Target

NEAS.0bb3ccf16acce19c0425f1c837584820_JC.exe
Size

391KB
MD5

0bb3ccf16acce19c0425f1c837584820
SHA1

255c5bb5f807465f426853a89a38c3a588294fc8
SHA256

28360f99c2a7c863c49863527a1754dd0efcf343f50d41afc1f8e050b7cedff3
SHA512

e39c95f171b07e406c0360b138abefb6b5d62b3df04d9c0cdab53a934613d0ecb7e4663de32e3cb04dc33bc08439d37fc932f7beca0b6dfff079e5c843fbaf11
SSDEEP

6144:dC4umWphVf4j27zo1zK4f+dP9+xCOwTdzi1IcX45yV4:H9WphJx7kzlfUFGwTdnyVu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0bb3ccf16acce19c0425f1c837584820_JC.exe

Files

NEAS.0bb3ccf16acce19c0425f1c837584820_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ