NEAS[.]05d2639cbd29d39c3c8e36c55edcc130_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.05d2639cbd29d39c3c8e36c55edcc130_JC.exe
Size

96KB
MD5

05d2639cbd29d39c3c8e36c55edcc130
SHA1

bb6e6382990e1865e7a6d883bde3030a06af0d46
SHA256

2666f452e2b0a23733bcca5fd1d71b165963400ae1c8e244109d04943a437c7b
SHA512

25ae0dab6c5b6f8247c8126c6c4a1f46be8fc8eae9665f729ffa82d6cf87d00080e7be429fddb8796586f3230bac641a2878e4295a329480578e0009569155c8
SSDEEP

1536:36hqmbQwNNunP1zx8aEfM2ycyHo520FESEUAVNbSKEBEBqwl6xqTwdx4:q1jjutWaL2GoSS0BSXBKBl6rdx4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.05d2639cbd29d39c3c8e36c55edcc130_JC.exe

Files

NEAS.05d2639cbd29d39c3c8e36c55edcc130_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ