NEAS[.]441f152516a39b139650cfa5d2ec98d0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.441f152516a39b139650cfa5d2ec98d0_JC.exe
Size

851KB
MD5

441f152516a39b139650cfa5d2ec98d0
SHA1

10b0ad7e10ecb7d5efdb9d4a37bbe1b8e7f90106
SHA256

76fd74ccfb1c209c589193a5710ded8e894e6747ef3a39ace92fe3c5da5bd724
SHA512

1d3b190dd169a8754de3010ce3d8c3952ed71d1ce45b791f6d741d1ee3fe6efd82a2db0e8b082d94b649269f2d69b0a2697e22a636c5cfa75598856d78dc9ca9
SSDEEP

12288:Y/z3Rcg6fKYORUEodLwPtQVQBEJH8FoeaPH32XBWXL7T1NT36YomKen3+9qJ0iJZ:Yr3uXCxRUKRErpNT3ixen3EyJvRf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.441f152516a39b139650cfa5d2ec98d0_JC.exe

Files

NEAS.441f152516a39b139650cfa5d2ec98d0_JC.exe
.exe windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ