NEAS[.]0ca8c633ef267be1a9149296864f6d40_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0ca8c633ef267be1a9149296864f6d40_JC.exe
Size

364KB
MD5

0ca8c633ef267be1a9149296864f6d40
SHA1

8a17829b16a225133fa964695cb4d96a00412233
SHA256

216854100944097e202540ed17e4ae3a0ecf7a3c455a0dfad1a92afd8c6a368b
SHA512

68a46685cd92484b3d74c91403da4ab57f653a37cff64c08a90bacf52633d205d24f8f0b21186adb1ee17d472cf74e1cf84dc4af0a84d1cd7651d6ec7bea53bd
SSDEEP

3072:9VMfMIbIyw3J9z/s8kZUBqOHHlxFT36bZohhvW18qg8lE+BC3K5eqU+BC3K5eqYP:4fMmcp/stuqsHbFz6behUMlK70K7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0ca8c633ef267be1a9149296864f6d40_JC.exe

Files

NEAS.0ca8c633ef267be1a9149296864f6d40_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ