NEAS[.]40a363ac4d2d7593fc5b3d3c05393312_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.40a363ac4d2d7593fc5b3d3c05393312_JC.exe
Size

441KB
MD5

40a363ac4d2d7593fc5b3d3c05393312
SHA1

fb3b1f4c7f43f4d85873dec9fb695bbb67d9b005
SHA256

77bdf4d76884dff04f1b523a353489508b8d70c5e4994d1cbc8abd78ae2041d1
SHA512

1562218b7a163999edd34fb95b396c9623945d40d040cf3e4b535cbda4fb5b1bf38a7ad6dde87cbc9b16b6857ab02dfb3816d4a0310c3e20b21a0985d2bd6fc1
SSDEEP

3072:qR4jdNqTqHLklZpb4RrRDFBI/cMrnTS4y3NkEjbvjuC8xVkxRQjZ3phRrbhogmQ+:0afcEHI/prnm4y3NjTjuC8xOcxphLmQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.40a363ac4d2d7593fc5b3d3c05393312_JC.exe

Files

NEAS.40a363ac4d2d7593fc5b3d3c05393312_JC.exe
.exe windows:4 windows x86

3e3d633779e35448851e7a9ca7e72522

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

ole32

CoInitialize

Sections

.MPRESS1
Size: 163KB - Virtual size: 404KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE