NEAS[.]4e84c0bacb1c8a82ec411d14f12ec1b0_JC[.]exe | Triage

Sharing

General

Target

NEAS.4e84c0bacb1c8a82ec411d14f12ec1b0_JC.exe
Size

44KB
MD5

4e84c0bacb1c8a82ec411d14f12ec1b0
SHA1

2699c4c6913deb7aa69380151d8c8fbf27820ad0
SHA256

060a868e3cbadb42c380a61dda50b30d8c95b0f40642e7b86f746b8c05873229
SHA512

099a6614d2f2fc09d1ae2cdc0ddf1693b1612ad9543d026619d297c5bac97597fdd3d6fe26bb9774fcaf3a3e50a147754a4d1a7a1ca214d4c6505291e91485b5
SSDEEP

384:y9IJCbzW28aKf9UzwYp19LjggggggLvggggggggUaoc:y9sCPWgJwElggggggLvggggggggUaoc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4e84c0bacb1c8a82ec411d14f12ec1b0_JC.exe

Files

NEAS.4e84c0bacb1c8a82ec411d14f12ec1b0_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 6KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.MPRESS2
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE