NEAS[.]0c07c3dc98cee4f6cdabc897c9773890_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0c07c3dc98cee4f6cdabc897c9773890_JC.exe
Size

484KB
MD5

0c07c3dc98cee4f6cdabc897c9773890
SHA1

00fd9cbfda04beaffe090efefb26a3a063416b2d
SHA256

5b303d22910845c805b3c6ff7eb2b30615e5152a4114b1d25196729997613a01
SHA512

4a3842442763ba4cdaf5f59e2a8057f72146d2cb0213b0f32d6d61e774c045b8416d15ecdf8ec7de6cbbcbff1fce8ad97f837e31e49cf96cb8cfa6ec4eae944c
SSDEEP

12288:4keFUiTyEAfL76sSI6awspJnPcVK+j7CN:l+XmFL76sP+s6z7C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c07c3dc98cee4f6cdabc897c9773890_JC.exe

Files

NEAS.0c07c3dc98cee4f6cdabc897c9773890_JC.exe
.dll regsvr32 windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 408KB - Virtual size: 408KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 175B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ