NEAS[.]8e711c54e330169f84526596e6a09762_JC[.]exe | Triage

Sharing

General

Target

NEAS.8e711c54e330169f84526596e6a09762_JC.exe
Size

511KB
MD5

8e711c54e330169f84526596e6a09762
SHA1

c969b17e52cad259689359c4c3aee13eda437671
SHA256

834b8345f3c13cb3aac9ac75d9ff1676186c5914e6d9ab5a001659d2854c73be
SHA512

5b2cd4ad9ca68001ed2c92620cdedf603da6583f31f7cef911b0d3b519e3ad50d06b96169a0291eef645a2b799a4e90869ee34e9e9e7a5aefe32b3cd89aee457
SSDEEP

12288:H1/aGLDCMNpNAkoSzZWD8ayX2MQCw7D0EuIJBU7m6/elVDjkpr6:H1/aGLDCM4D8ayGM5IJBU7ElVDjkN6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8e711c54e330169f84526596e6a09762_JC.exe

Files

NEAS.8e711c54e330169f84526596e6a09762_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE