NEAS[.]96121395ef8e6e250a95575ce1d17160_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.96121395ef8e6e250a95575ce1d17160_JC.exe
Size

412KB
MD5

96121395ef8e6e250a95575ce1d17160
SHA1

7b9ac96adce102f0a60bedd50d6c908a32bc3b28
SHA256

f32b30c28450c603584ff7aff127e5c9480aa1c7f47eb094a58b536c9e3c89dd
SHA512

4118eef2e720ff6216fc51970af316ba60219cb6106d2ecab7f724fd1f7673342fd53f3cb475c950be0a1b1dddf8485938367dd1ebc66a96f8bcc48741ec504c
SSDEEP

3072:tVMfMIbIyw3J9Y6YRJglN+BC3K5eqU+BC3K5eqYroGE3Iv:IfMmcm6YKK70K7JIv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.96121395ef8e6e250a95575ce1d17160_JC.exe

Files

NEAS.96121395ef8e6e250a95575ce1d17160_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ