NEAS[.]5cca638834b2e92d280f2c89b3a11ce0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5cca638834b2e92d280f2c89b3a11ce0_JC.exe
Size

1.3MB
MD5

5cca638834b2e92d280f2c89b3a11ce0
SHA1

62564bdba556ea1fa31911977d72ecab64e2d4e3
SHA256

35a80317ac2261551183f8c7314359b275d6434a0b52bcb222b722ee1f6d7060
SHA512

53599c3ff6b6c09b28b36499e98839d156d09c388e330708a95f76d31729fffcb92516cce49d2d63a429d4d4b49454f191a4e5799568f0fa217d007ac6479528
SSDEEP

24576:C/BuBd32MAbRpPYnIjNbbRICYyGfFHNdaybdIl:CJuBd32lbRHNbbRICYyGxIl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5cca638834b2e92d280f2c89b3a11ce0_JC.exe

Files

NEAS.5cca638834b2e92d280f2c89b3a11ce0_JC.exe
.dll windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 261KB - Virtual size: 260KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ