NEAS[.]007a3a922104fae411d8d06e67786d90_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.007a3a922104fae411d8d06e67786d90_JC.exe
Size

1.5MB
MD5

007a3a922104fae411d8d06e67786d90
SHA1

2e06c0203afcc472ffaf6a004a16421564e3ecce
SHA256

69498a772b9dee7191c5b222e7b0427c565826ea5bc79f4836ea2b19bfe8426b
SHA512

35e91fb1a0af551fc11a44432c2f15375c852b85a0484e55b456a30d9f9029d4d095ca9b3fd139f9169629bb5cdbd873da093c13d78796058da14bd2ac0c6ebf
SSDEEP

24576:onzP9C4tNiE3E0Z6jsJJYa9JSjrjEBmCoNq5GciuFrBOg0h7J73wYUkdVQwNo:onb9C4tN/vooTR7SjnEBRgOGcj5Ig47N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.007a3a922104fae411d8d06e67786d90_JC.exe

Files

NEAS.007a3a922104fae411d8d06e67786d90_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ