NEAS[.]f1b71b4214d483bedf9923363aa9e150_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f1b71b4214d483bedf9923363aa9e150_JC.exe
Size

12KB
MD5

f1b71b4214d483bedf9923363aa9e150
SHA1

0e4d20ceaf59f50827cb3c7e976c23aa8adbc68f
SHA256

50afe21273ad795b8e572dd4b73807d515df4c75fdcfa718ef0d9b04f4251b54
SHA512

4841ac80786a2719b5b6d895c2cd75308b6d2a8be0b17fcce82403ea116c478c784a4a86236cba7695da35a824ed2577974a859074bc433e2cf135d72ee38b7e
SSDEEP

192:uDx8HCL+1LQlapRtehWUTo+O+nC3z2dfTfoMQVgkwr1b+r:Ex8HCa1ztubEn+CeL2VXwF+r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f1b71b4214d483bedf9923363aa9e150_JC.exe

Files

NEAS.f1b71b4214d483bedf9923363aa9e150_JC.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ