NEAS[.]77d54151aa4ca140e504ba2cdedaaef0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.77d54151aa4ca140e504ba2cdedaaef0_JC.exe
Size

77KB
MD5

77d54151aa4ca140e504ba2cdedaaef0
SHA1

a5882fbe714a4095782c016a67bf3a55222fae52
SHA256

085798aa4e0ca82af7b68a636f85239e31cf2d276203105f1483ca278fe9e702
SHA512

1ddfbdc0304e93af9c080fa9f7ba879d8fdce5da1679ff0251e12d68494207e84bfb110462d0a5843b7f4f6dc59aa8bc855d2a24e76823b719170883abadcf4b
SSDEEP

768:5nQgoDziqWrwTmjC0oQAm7be2HbNnfXxjw646KnuNUIW:5nQgof/WrnC0otm7bXHbNfXFBG4RW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.77d54151aa4ca140e504ba2cdedaaef0_JC.exe

Files

NEAS.77d54151aa4ca140e504ba2cdedaaef0_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 16KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE