NEAS[.]3496eeea3272c03e3aa61f8368f530b0_JC[.]exe | Triage

Sharing

General

Target

NEAS.3496eeea3272c03e3aa61f8368f530b0_JC.exe
Size

208KB
MD5

3496eeea3272c03e3aa61f8368f530b0
SHA1

7fc8337f25a53c9f7b97ef14313cd0a567f2821a
SHA256

fa28b638cf845ca6297c8c81853b66922cd651ebcc7454842229fe3426ff443c
SHA512

0643150050a3eb9e90a623b7a394e4dfd7330fab20980e2a3a3189b5eff0dd799e308f810afab1d4f81496c3bd7bca50a9e36bda2ef3a592deff1d71f607cd76
SSDEEP

6144:nx5gbhCV+TwAipDYH+/E2r0AYEItqDNW3FSF4sFl78:oOB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3496eeea3272c03e3aa61f8368f530b0_JC.exe

Files

NEAS.3496eeea3272c03e3aa61f8368f530b0_JC.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ