NEAS[.]2501ecc06e2a34d50a0e6029908c9760_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2501ecc06e2a34d50a0e6029908c9760_JC.exe
Size

108KB
MD5

2501ecc06e2a34d50a0e6029908c9760
SHA1

2842bdc3f6bb79ddf7f8d88d80e31b11724bf480
SHA256

5398437f8e8b747bb55781b48dbb3b43bc43f816c03cb3d7e859e464811fcf29
SHA512

d2861328e73bfc9f6fa49c4c3060f445f2a2906383cbe1be40f15ce565a0f9394e02f9dddfa00b4094e5dcf4dee940a8932868ada38c6557862ad8ac154cbb61
SSDEEP

1536:4aiqH1s+kCtrA2UMT0mTFibDKa1XohF0fqRMa1ocXNZAG2GxnUJy+6cHHWjCNU08:51B31bdBob2QXosSc8N3nUx3H2jCK08

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2501ecc06e2a34d50a0e6029908c9760_JC.exe

Files

NEAS.2501ecc06e2a34d50a0e6029908c9760_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ