NEAS[.]9943ecd5c933811b50818a69aea7d310_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9943ecd5c933811b50818a69aea7d310_JC.exe
Size

212KB
MD5

9943ecd5c933811b50818a69aea7d310
SHA1

2e2da6084d91885cd794e0a088b2ac2e1dab7dee
SHA256

f28359f74cf5f198bb1e8a46f7a62399d19d5da18c9285ecacee7c94d85c1885
SHA512

47b1297869a92ed30cf40a9de35daedfd66719e299bf39c05da9b839894d8bd8a7b14d0af56a3c243e0468eaea47396ab058bfb33416285c3a1ab64d1c9f1d8e
SSDEEP

3072:tnUUoWCOw4DPYSENusrX2hKkTuUioZvKkZKDZ9ZQZycTGfO1Cv0eP:tMjmhKkTuU3vS9KZycSfOXe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9943ecd5c933811b50818a69aea7d310_JC.exe

Files

NEAS.9943ecd5c933811b50818a69aea7d310_JC.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 200KB - Virtual size: 196KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ