NEAS[.]01f01a9f724dadba3370e79ef47b2c20_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.01f01a9f724dadba3370e79ef47b2c20_JC.exe
Size

31KB
MD5

01f01a9f724dadba3370e79ef47b2c20
SHA1

4a16ce8b2af4a1b2d6b63ceb9787b5dc14e79e2b
SHA256

c21e23f5efef7cbbffc6045bcff1cd10c895dd16a243ef43d48a8a54bdea4db0
SHA512

534ed59929b64a28591cd9f5fa80ec2ca09bee48bcb1e159b21b403709159637d8b5015ad86bcabe1b0f8523c460c958388069c9f403f049662bf97fd3273325
SSDEEP

768:YFZpcwRrBFcf29uPQR6tR7pGrxzbPrQhaU5YOFgzum64WDG9xzbPr:g6mVFcf7Y6/7pwchaqYN1WDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.01f01a9f724dadba3370e79ef47b2c20_JC.exe

Files

NEAS.01f01a9f724dadba3370e79ef47b2c20_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�2 ��u�
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE