NEAS[.]01b9b50f202c42113182b62a2be646b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.01b9b50f202c42113182b62a2be646b0_JC.exe
Size

32KB
MD5

01b9b50f202c42113182b62a2be646b0
SHA1

4f6ea0b24eb6a411eda7924e17b57c2e388082e2
SHA256

b80ef184cd02a6165e813dbfc893cb8b0c741fe0d56c3103cc4cee6068802841
SHA512

566193e60a17f2e89b36c71d4478051fe963b0c746ac3ec866a576d2235e87951579809fea3a9acbf6fffc4f039aa9baef25d4ee2c23df4fc5d147108342eda6
SSDEEP

384:YCRM84hqhwKaBszhPIOeR1zwe6Lq2++qQJw6OzVjAa:Yb84hqh+BszhneoqnQO5V5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.01b9b50f202c42113182b62a2be646b0_JC.exe

Files

NEAS.01b9b50f202c42113182b62a2be646b0_JC.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

@Borlndmm@HeapAddRef$qqrv
@Borlndmm@HeapRelease$qqrv
@Borlndmm@SysFreeMem$qqrpv
@Borlndmm@SysGetMem$qqri
@Borlndmm@SysReallocMem$qqrpvi
DumpBlocks
FreeMemory
GetAllocMemCount
GetAllocMemSize
GetHeapStatus
GetMemory
ReallocMemory

Sections

CODE
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 402B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ