NEAS[.]e819264d61ce63b4944dd9590f251490_JC[.]exe | Triage

Sharing

General

Target

NEAS.e819264d61ce63b4944dd9590f251490_JC.exe
Size

464KB
MD5

e819264d61ce63b4944dd9590f251490
SHA1

372e81a36cc9d4af8384781e897e77d60ac6f36c
SHA256

8586d00273940e3a67b744a4a8280aa051ea7f4c1a52ecbf63a9c2e08e86f865
SHA512

f9394c892b50d5b8c63e972c16da4c706625f46365bf54d3fea9c7dcc73f19aae09ce6f16ace8e13d648af1ff61349ecaf962d5259749731eaca2b76a3a1d8c1
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5iioc+npLspl8uXH:/pW2IoioS6KCX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e819264d61ce63b4944dd9590f251490_JC.exe

Files

NEAS.e819264d61ce63b4944dd9590f251490_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ