NEAS[.]a580b73b8ce10e0ba2148cc0ca26bfe8_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a580b73b8ce10e0ba2148cc0ca26bfe8_JC.exe
Size

90KB
MD5

a580b73b8ce10e0ba2148cc0ca26bfe8
SHA1

c1d443e8196c6e534bda16c844039994efbb736b
SHA256

32505ae3e5eb4c6baf0816d734803f016d15a6d6de2a17ff4d038b8c46352730
SHA512

cd296f97793d521eae07d950fa41d2990504fc6d32b2cff24655be132f0775f4def2285cd2774a85c14eae0dd04fa420659870ac36a0eda3c28b21c29acff1a6
SSDEEP

1536:3fquQsebbn6SxrkLvrW4l9SLvUB7Oh18DQzRcsnk6raTM1HhGlKfbxSqtsk9W:pYHMvK4/SvUxOh1wQzjk6raTMJhVf9SD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a580b73b8ce10e0ba2148cc0ca26bfe8_JC.exe

Files

NEAS.a580b73b8ce10e0ba2148cc0ca26bfe8_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ