NEAS[.]0b4576ede30c89ddabb2a2f37d4b97b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0b4576ede30c89ddabb2a2f37d4b97b0_JC.exe
Size

227KB
MD5

0b4576ede30c89ddabb2a2f37d4b97b0
SHA1

df030b00653927192a146734c5de9bddde86c8dd
SHA256

421bcb92ade5a4462e1e7aa07e11f52fadb46589476023a0026f59d1f5928127
SHA512

0d270db0e77f3e257e6b3e4b3cf1f3015b9609eb46da696128e09f0b32df47ca88f962a82010c24a6a730c9ba82aa8da9bf03b898d9316be4326afba9b34bf94
SSDEEP

3072:F1/LcgTsDAJJRjOMCAZ2l/uJrwhGHsVLFZhh2D+0caj3kyRACIhw9:F1DdJJlzhJrzHsVn9ozIa9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0b4576ede30c89ddabb2a2f37d4b97b0_JC.exe

Files

NEAS.0b4576ede30c89ddabb2a2f37d4b97b0_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 217KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE