NEAS[.]57df8b130360ac088c011214940b50f0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.57df8b130360ac088c011214940b50f0_JC.exe
Size

341KB
MD5

57df8b130360ac088c011214940b50f0
SHA1

4e726b2292b05455400ad30a59881fa29a2f91c1
SHA256

7523f079291dc97c94ebc61448719c9c4a76e21772b28dfd8cfb43e712e1ad38
SHA512

ba2add24aea30653cd999a6e55c4832e562efa7a27bc9c3fc68a371a831b8dc69822c80d686ff8965aaca4ad7024dada104ef06fdb9d70930d326b46220b6ada
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5iinNrv2zGJIKVZq:/pW2IoioS6lV4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.57df8b130360ac088c011214940b50f0_JC.exe

Files

NEAS.57df8b130360ac088c011214940b50f0_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ