NEAS[.]05b2288c5679d460834d397a7ed84f10_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.05b2288c5679d460834d397a7ed84f10_JC.exe
Size

31KB
MD5

05b2288c5679d460834d397a7ed84f10
SHA1

6daba324c005d0682ac5dffd0ab14d1baf615cf7
SHA256

47259296031097d597ce624ced38b1d432c8bc276dbd4f08cd71eea7be3721b4
SHA512

2bcc68eeb33a5c3d7d28dd4882b161bc7db314935a0b8494c7b925c3b81d256cd0cdce85ad66983e1553f7ea7b00a622cce81dd5c10e9a8669a1304c9ec87ff4
SSDEEP

768:YFZpcwRrBFcf29uPQs6tR7pGrxzbPrshaU5YOFgzum64WDG9xzbPr:g6mVFcf7d6/7pwAhaqYN1WDG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.05b2288c5679d460834d397a7ed84f10_JC.exe

Files

NEAS.05b2288c5679d460834d397a7ed84f10_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.aspack
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�2 ��u�
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE