NEAS[.]0b7306fc77690ccc543803268eac0b60_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0b7306fc77690ccc543803268eac0b60_JC.exe
Size

75KB
MD5

0b7306fc77690ccc543803268eac0b60
SHA1

9f86b4d243833f99708121b856aaf33a9619ff38
SHA256

247169e80c101fec26f7f006d8f780b963cd79a1c906f1b5d2ad4e654ed9d183
SHA512

4e7894596d70f1cd8ba28663bea4d506424c094db7793315285eb04e85164a3da4c6ce54ac65cbc8b71ecdf2c8d25f8c35cc32f86b67aa8cbadf3a1b63487d8e
SSDEEP

1536:ZVC1wFYGFb+MlYeiYe1Cqi1txWkXisKldp:PF1Fb+MyeiYeJIqV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0b7306fc77690ccc543803268eac0b60_JC.exe

Files

NEAS.0b7306fc77690ccc543803268eac0b60_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 84KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 20KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE