NEAS[.]1848b90ac3e3b3cfade9cc3659137250_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1848b90ac3e3b3cfade9cc3659137250_JC.exe
Size

112KB
MD5

1848b90ac3e3b3cfade9cc3659137250
SHA1

1d039b66286dd57da6ddd92e55b7a3ddd3615e62
SHA256

e5094d82ba9ed7c9238592f5e396ad775fa0be247039a1e9d1ab78a6d4294562
SHA512

f0bc54c72ef5ffaaecf88643689b86eaa1239b5f2dce3501816479a02978629bd1fd6f165b82c6988beee2f2b55c37ef1694d81557563342dcc75689f413cd0c
SSDEEP

3072:rYHMvK4/SvUxOh1wQzjk6raTMJhVf9Sg39lYH5:8Hf0+Qoh9vAhH5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1848b90ac3e3b3cfade9cc3659137250_JC.exe

Files

NEAS.1848b90ac3e3b3cfade9cc3659137250_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ