NEAS[.]NEAS5bd462dba7dc81580b9db9057b21de72exe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.NEAS5bd462dba7dc81580b9db9057b21de72exe_JC.exe
Size

3.4MB
MD5

5bd462dba7dc81580b9db9057b21de72
SHA1

5c5b572ef40b4f494ad8b763aa0290eecf07ab94
SHA256

569305c3e7c58f3a7bafcbb5123929a7e48b08dc307d85e71ca0b8d3e8b6f4cb
SHA512

6ef32224b5332f8bfd7bdd1348dc3fe32cf1346438e1cb1278fe497e3eabe0b351ac63f96bdc43cb25145fcc74a58ee3b880fd6bdcdb2e4f256f39af910ef000
SSDEEP

98304:N3MyUHCeNef2YCVxWKzyNeeYioAGYzDXOK2TRJkz:N8DiegOYCVL+ezY/OKmJkz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.NEAS5bd462dba7dc81580b9db9057b21de72exe_JC.exe

Files

NEAS.NEAS5bd462dba7dc81580b9db9057b21de72exe_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ