NEAS[.]0fda5059b10d6e1cc5cc4467607a62d0_JC[.]exe | Triage

Sharing

General

Target

NEAS.0fda5059b10d6e1cc5cc4467607a62d0_JC.exe
Size

416KB
MD5

0fda5059b10d6e1cc5cc4467607a62d0
SHA1

320025077ff1e5dc3a660fb92c6b4e3b05af1b1b
SHA256

e06e2c5a07b0db4d2e3127788e111b447ea1a76ea95f1060d9d8b175748ab5b9
SHA512

7ca6821046fcc2e7a17815cd01cc222c4fc71173f9e284c14befbdb0856e63d7ba53202f03b05b49543f1a4f71408829ba01d472d1aac7220c03fe611cac9d43
SSDEEP

12288:QXR/DYTEYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:QdYwYJ07kE0KoFtw2gu9RxrBIUbPLwHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0fda5059b10d6e1cc5cc4467607a62d0_JC.exe

Files

NEAS.0fda5059b10d6e1cc5cc4467607a62d0_JC.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ