NEAS[.]0610b7e27027ab9b8a17a5ac9cfaf520_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0610b7e27027ab9b8a17a5ac9cfaf520_JC.exe
Size

136KB
MD5

0610b7e27027ab9b8a17a5ac9cfaf520
SHA1

a8cc83ce80eeb2cbac3266e78d96adbd824a50f6
SHA256

cdb9c777810141f4992dbafc84bf95efe7e11b6340bcf60cb16796b87fedefa5
SHA512

b22fe7fc69aef7f83c9fc32c0c2ddaf02d563c2b5c4a97d6e1e91b478a395432304336345451c517b92d14b5e27b6ee8e93a74f1c3e63078350e28178e755a5c
SSDEEP

1536:GlnG5ya+3z/cVrq6kvSNgzIHYnVVRox8zj5w3vEzkSrcp/90:cGoP3f6DNGrVVKx8zlw+kr0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0610b7e27027ab9b8a17a5ac9cfaf520_JC.exe

Files

NEAS.0610b7e27027ab9b8a17a5ac9cfaf520_JC.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ