NEAS[.]64aa322a07dde803a310a361db3e77b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.64aa322a07dde803a310a361db3e77b0_JC.exe
Size

392KB
MD5

64aa322a07dde803a310a361db3e77b0
SHA1

cc2dec3078daf2b24610043d03d1136209e31e90
SHA256

4c642f3fd901f39abaa27216d4d7366bd6193f874ee7bace26fe242ce223241f
SHA512

7527e91d29b42e25b4ee794652e0dd641e317c95ff44b40a3e6a9fd13740a583f82364452747776958991124f6934f3fbccee2a705dd0dc18168a475c62efd9e
SSDEEP

3072:ifQgicdlGvILcU9KQ2BBAkJaPxsfAolUrvJ3nk0Oe:wicdlG5WKQ2BjGxXi5e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.64aa322a07dde803a310a361db3e77b0_JC.exe

Files

NEAS.64aa322a07dde803a310a361db3e77b0_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 124KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE