NEAS[.]24005a1ab1a86adff60e0a4eee182e90_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.24005a1ab1a86adff60e0a4eee182e90_JC.exe
Size

469KB
MD5

24005a1ab1a86adff60e0a4eee182e90
SHA1

c024e819a3ee3375c81ed3ca9b6b7cad20900e65
SHA256

2a11007b4d52b127e252a1c30416b845b61d5cfc5dda5b72362de66bd3d0524f
SHA512

827032f1caf20c2591d15e2e0a7ac53a4b40e29c65720ea5293668a149872ba772619c32e763c5382a79a0851ee4fdb907943eb9b84106462453d37851bc3000
SSDEEP

6144:NCefladzY020hrZzeNfxDEDv02DToExq65:NCefladJhtn0OJxP5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.24005a1ab1a86adff60e0a4eee182e90_JC.exe

Files

NEAS.24005a1ab1a86adff60e0a4eee182e90_JC.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 312KB - Virtual size: 309KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 72KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ