NEAS[.]f63de565256e5b74f2c0628cc65b9ed0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f63de565256e5b74f2c0628cc65b9ed0_JC.exe
Size

107KB
MD5

f63de565256e5b74f2c0628cc65b9ed0
SHA1

ee8921e1f14d2f1ca579737662a63397c0f0851b
SHA256

09c4ed82e1ef154c3ead0ef2c8ecff3b5ad340c289eb944f2081ed4164dee920
SHA512

a1cd630e083f570711c5b0bfa23d755fa43ec2e12e21301af3b0cb2b468b9211e3e2c37efa0142dfce4f5be85cceb1efbae1931fb863a67ace70bb25eb9d2b76
SSDEEP

1536:Fq7F26QltY3HMKZciQ7tM7+cqqDpqzGQF45NCfwQNWHC6vQEM2nX/miO:KF2hvY3ZNQZMUqQGQazCfwQ8HC6vv0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f63de565256e5b74f2c0628cc65b9ed0_JC.exe

Files

NEAS.f63de565256e5b74f2c0628cc65b9ed0_JC.exe
.dll windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

89425a97f3f500fa810ad03f0c382542
8c2be93e18276203cbd918daa2748a10
a185c62eba2497c95197140e5282b27a
burst.initialize
da352d92cabf024fc9986011d52a4537

Sections

.text
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 948B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ