NEAS[.]1c637c5b980cd1b6cf53a22c95ed93b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1c637c5b980cd1b6cf53a22c95ed93b0_JC.exe
Size

321KB
MD5

1c637c5b980cd1b6cf53a22c95ed93b0
SHA1

41c8dccd18964d3af582bb51695ac0be2b4210f3
SHA256

d612c50661287437806655bef076cf2baedb33c3ad93f9087f49f48000b1c50c
SHA512

c14140e7cbcc6ce2a3cae87897c639785a95bae1c16e42fcdf2125d7e668b59b3260099809d7e7380f12767c33ccaf03deb0251a56046cea5c0dbe8ef8842886
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5wQGQoqnqdmAJ5VB1WP:/pW2IoioS62w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1c637c5b980cd1b6cf53a22c95ed93b0_JC.exe

Files

NEAS.1c637c5b980cd1b6cf53a22c95ed93b0_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ