NEAS[.]222d81a2bd6b22b45c2dfc9b39e47cb0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.222d81a2bd6b22b45c2dfc9b39e47cb0_JC.exe
Size

148KB
MD5

222d81a2bd6b22b45c2dfc9b39e47cb0
SHA1

8fa8f304722b3a302d0ae45b9395c7e89a96f945
SHA256

01d13a68f1a5c42a1a9e19bd2075220f796bcbb30d54125d3db4e485f3c4877b
SHA512

0f69616d7d285f698e5dfb522c4104af42ab17dea3f271f52b1c4bc55ff75ed8adbb43070a2af767a654f75e46b66ab3e067c7f97b84ff45c20f8909a2b76b82
SSDEEP

3072:7xfAY5D3LnW0vXSJMT+mzMxU4Fm1MyWmriLYtq:JWY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.222d81a2bd6b22b45c2dfc9b39e47cb0_JC.exe

Files

NEAS.222d81a2bd6b22b45c2dfc9b39e47cb0_JC.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 124KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ