NEAS[.]2007f761b70ea6218ed65c4f35e37860_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2007f761b70ea6218ed65c4f35e37860_JC.exe
Size

3.0MB
MD5

2007f761b70ea6218ed65c4f35e37860
SHA1

8c0bcfcc3b09488b5dd4c182351f9cc6d644e5de
SHA256

05cbc3f8c6011c880bd57f9ddabfa65615ea78484f8c0786d4872f0c9dd296f8
SHA512

874d85d73f7b3361f37213eb0ec4474f80d6d14b3b5fa85881e44fb526d3d821d5a9ce5329dd4bfc9a263b766d92c25874db1c43caaa0d418c044095a5f21a75
SSDEEP

98304:H9YC+XS62bz/5YvpI2eey98CRC4L0ZRbo:6862bz/56nvkwPbo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2007f761b70ea6218ed65c4f35e37860_JC.exe

Files

NEAS.2007f761b70ea6218ed65c4f35e37860_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ