NEAS[.]NEASf636270c6ddcdd7783ab6793eef0dfbcexe_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.NEASf636270c6ddcdd7783ab6793eef0dfbcexe_JC.exe
Size

8.9MB
MD5

f636270c6ddcdd7783ab6793eef0dfbc
SHA1

0b52d64bb25ec36adaa0740e78ad332f2e98ae0e
SHA256

ba610522bdc69144edb8b73590ee680e9a65b5c65ef1b9951a1db99fbb781689
SHA512

ab270cb83398bb0371c54466cd2fca8fe850876a0464dc1ff5eb1c3325397b345bebf133f7335376c66cdd97d15fefdd01d23972ff7bfd761b45087167e9595d
SSDEEP

98304:B8L1CB7nroEStR5Jo5H7mdbN5x5aB0FLOAkGkzdnEVomFHKnPKKbC:BO1A7nroES6H6FNPrFLOyomFHKnPE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.NEASf636270c6ddcdd7783ab6793eef0dfbcexe_JC.exe

Files

NEAS.NEASf636270c6ddcdd7783ab6793eef0dfbcexe_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE