NEAS[.]78236064884264d62457db7a1ae24850_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.78236064884264d62457db7a1ae24850_JC.exe
Size

427KB
MD5

78236064884264d62457db7a1ae24850
SHA1

e64f46c34b2401a3580d3ed3192743f31ce670ab
SHA256

57ddc1f35d5e7e4f9fd9cd8e0b5ba0bd0d89df066a6eef32d6fe1757573fbb9c
SHA512

34b6bd1cce723808bb5317054e99b941ccea94739c520e47d009e8964119a386ef0cb98ba2e52bd4b91ef2e6ad6de6042bce9078dda9bb1e842dbef2bd2fd3ad
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5iinNrv2aGe+nJhCW3LUV:/pW2IoioS66Le

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.78236064884264d62457db7a1ae24850_JC.exe

Files

NEAS.78236064884264d62457db7a1ae24850_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ