NEAS[.]58b5a5806991b7da0c796bb1699f12e0_JC[.]exe | Triage

Sharing

General

Target

NEAS.58b5a5806991b7da0c796bb1699f12e0_JC.exe
Size

260KB
MD5

58b5a5806991b7da0c796bb1699f12e0
SHA1

39f63cca1108ba7a4bdd1386ed3ba2187f284e75
SHA256

ff1f78f183e10ab924f58ee4f6511fad0ec57ccdb2a5bb36a3fea9d972778525
SHA512

832ca204a3ad9a97a9b1c9beb07722f39d0f03e34ecbfd1c486a8d4c9299cbd4a26ec64ee0cc7767d05c656c7fb177bd4aaafab872e677b90f2281d7d72a0905
SSDEEP

6144:cEDLfhBo8/QJZ10q+xpaLeOkzTo2jSvlpABKbroz3bY1PkwKL1TxDBJhTA8GyoN2:xfp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.58b5a5806991b7da0c796bb1699f12e0_JC.exe

Files

NEAS.58b5a5806991b7da0c796bb1699f12e0_JC.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 232KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ