NEAS[.]0affc7a30ed73bb50609ae8f010a7100_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0affc7a30ed73bb50609ae8f010a7100_JC.exe
Size

376KB
MD5

0affc7a30ed73bb50609ae8f010a7100
SHA1

fc9726e1154ef3fb2b3ad5f1751c3a3f164e53bd
SHA256

12870460c2b36cbf8ccd7e9d81084f48ff7ffb60280f769f897a53ffb4036237
SHA512

d1507e6bc0b7c4c5d22417d743a69612c3d6e47dfb10f33dbc9537955b3d5728162384f786fc5ead959f47ee43a98b203d2ec595710cde1975fffbdbd451c10c
SSDEEP

3072:1VMfMIbIyw3J9UvGt5j388TscmeikYVC4KahTjWqflR+BC3K5eq/pM:gfMmcSGr38gIgMFK72

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0affc7a30ed73bb50609ae8f010a7100_JC.exe

Files

NEAS.0affc7a30ed73bb50609ae8f010a7100_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ