NEAS[.]d98aa317d4e06c330be38ab62614653b_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d98aa317d4e06c330be38ab62614653b_JC.exe
Size

6.3MB
MD5

d98aa317d4e06c330be38ab62614653b
SHA1

5a8e56d02936d990c40f3830619b066bc0f48cc3
SHA256

21864d6c027228da09da6e4c755c57e723c7a40b726c47529fcb14e86c668cc1
SHA512

189eb2a784a14fd95a5351c3ff7781479c8ecdb8b57df35666df2459e5c122a93edc0fc7147646c8b76d0f0544a5165743ecfb7614091f1ca94c2589c258c1d1
SSDEEP

196608:xCWVDBzcjgBNXcolMZ5nNxvM0oLo6YTstiyKf:8WVDBzcjgBNXcolMZ5nNxvM0oLoVQti9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d98aa317d4e06c330be38ab62614653b_JC.exe

Files

NEAS.d98aa317d4e06c330be38ab62614653b_JC.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ