NEAS[.]c3540c4cb9ffc18f3f73839c14917ea0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c3540c4cb9ffc18f3f73839c14917ea0_JC.exe
Size

389KB
MD5

c3540c4cb9ffc18f3f73839c14917ea0
SHA1

047b6fc12ade342f50fc7d5fac01dad73b8d1ec7
SHA256

c2c3ce771acfe6047c2b7b014129abf3cd12c26bd6377d19e1c725c2435c4111
SHA512

2094813526ec13088962f41638cb2a4b1879e84ce2d40f95c179b06d41e9f1c1fc964ed8a52b37bd908587507b941789880545ab872d84585bf842bd3626bc79
SSDEEP

6144:bkDxtiYyged7360KEui8oEIJn4HMDGrCfA+0lKtAunspP/+:b4xtiYyged7K5LoEIl4H/rotAu1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c3540c4cb9ffc18f3f73839c14917ea0_JC.exe

Files

NEAS.c3540c4cb9ffc18f3f73839c14917ea0_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 264KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 114KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.oli
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE