NEAS[.]f192cae03cf269758e4c9c57da0bd8a0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f192cae03cf269758e4c9c57da0bd8a0_JC.exe
Size

166KB
MD5

f192cae03cf269758e4c9c57da0bd8a0
SHA1

b876468ce6551e2eb53dc083e52b588bb3d3e311
SHA256

25cb731d9936cbad8e655d4521d289eae9aba1cf90dd5a3df31e01bcda1c157d
SHA512

52501e48b42c671a6bcbe74b08143efd674a7c1dde6af1d83c54dcc60b2df4dd3f8e48f60adee8598389c602432c23e68410fef0c090b1130045b1a49d2f9372
SSDEEP

3072:spN+nDEWGRno0JzSGn5naEUGLWEuR4jSBj8AI:gWlQ+ExSVI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f192cae03cf269758e4c9c57da0bd8a0_JC.exe

Files

NEAS.f192cae03cf269758e4c9c57da0bd8a0_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ