NEAS[.]0b4b5da1968d2daa53b3533a6773bc70_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0b4b5da1968d2daa53b3533a6773bc70_JC.exe
Size

88KB
MD5

0b4b5da1968d2daa53b3533a6773bc70
SHA1

43942b19aad2f1ab76a8672a5cc740a3a154fa65
SHA256

8fa27fce2b53db39d78ce16af6d9c2a50f0e0a62123f4a8a6996a119d5ab9c59
SHA512

c6ea057688d8a26b14974b74c9761d821cd307480453fbc42373fea014adc303f46abb252fcb3ec8696c70064dffffc8ceda5ae6ee7392a85451b01c9272b29d
SSDEEP

768:L+aiqH1sziGJLL6iiaGNZ7KmA2UMSwBfNrGxnT0BrjqstFiwADKakU1erbv91JaB:yaiqH1s+kCtrA2UMT0mTFibDKa1ANoh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0b4b5da1968d2daa53b3533a6773bc70_JC.exe

Files

NEAS.0b4b5da1968d2daa53b3533a6773bc70_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ