NEAS[.]3beb8b12561e457a0941cffceb4cbbb0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3beb8b12561e457a0941cffceb4cbbb0_JC.exe
Size

495KB
MD5

3beb8b12561e457a0941cffceb4cbbb0
SHA1

d99b93714f1ff792c9d52ac4011835bd7ab765ae
SHA256

8ca8356d3dd0b8eb8ab8d1f6d4dbf2608ef5f1a30afa3df9ec1b3917bdd8d342
SHA512

5d5eac7cc997f188877e27ea469d22f5597b41e9065e443c404b5eb2a68b2e4802f6bb2e60cbf7d87c736f7b4d2208dc74f9537a57d0f1e03f6e91c27df0bba3
SSDEEP

1536:YpNg3eJG53G73mxdvd7Gan3zUAsTS+S1X8CCxffGan3zUAsTS+S1:Yg32GhNvFf4AsTS+iMnxfff4AsTS+i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3beb8b12561e457a0941cffceb4cbbb0_JC.exe

Files

NEAS.3beb8b12561e457a0941cffceb4cbbb0_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 226KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ