NEAS[.]d6b10ea4d1ee377b6fd28f6a0ad47f4e_JC[.]exe | Triage

Sharing

General

Target

NEAS.d6b10ea4d1ee377b6fd28f6a0ad47f4e_JC.exe
Size

740KB
MD5

d6b10ea4d1ee377b6fd28f6a0ad47f4e
SHA1

4aad355e1783859e84f3f37a1c98a280746bcd6f
SHA256

f268ef1e3872764357d0e5cb0591f087702855022fe51f1801936ef5dfebd90a
SHA512

009d88b7e8c808391baf42e7d46b0aa77112b7afe16e1a114fb4ca81b7162a21c148b4e1d24d027d669eee06af4eb89f0be48f12c3549e9b1ebcb73fa221eb35
SSDEEP

12288:j2JylsKTzsBfXwZc0IursYCYQeSnyZJiqlEbXSb9NtCGOF2O27MVzO:j2JyxUB4MYenGJiKEbXWtfOkUO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d6b10ea4d1ee377b6fd28f6a0ad47f4e_JC.exe

Files

NEAS.d6b10ea4d1ee377b6fd28f6a0ad47f4e_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ