NEAS[.]0888351f0c45636aa095b6ed347a7e7e0007d2e0c6e94231218ea2ae7e9b872aexe_JC[.]exe | Triage

Sharing

General

Target

NEAS.0888351f0c45636aa095b6ed347a7e7e0007d2e0c6e94231218ea2ae7e9b872aexe_JC.exe
Size

787KB
MD5

c9ed081ae619cbc7cd719aecc8be1249
SHA1

56196542291550b77735245dd1ffadffb67ee289
SHA256

0888351f0c45636aa095b6ed347a7e7e0007d2e0c6e94231218ea2ae7e9b872a
SHA512

7fa15c9f2019b8d0e25b0805a41ea78fcc5eba13f929fbef1081778b9e94a4cf1752b1a8968432ae03f0a34ac5e2b95ee79191b0e5a131d96fc65b854f281222
SSDEEP

12288:fLqsJhSxP5fgGl8WYfGa4RgbvGib+XoV3sMm:+4hSxP5fgG+WYfGaFb+W3g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0888351f0c45636aa095b6ed347a7e7e0007d2e0c6e94231218ea2ae7e9b872aexe_JC.exe

Files

NEAS.0888351f0c45636aa095b6ed347a7e7e0007d2e0c6e94231218ea2ae7e9b872aexe_JC.exe
.dll windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Shared
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ