NEAS[.]b9d23ebf0d98ee14a50ca2b9ab299340_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b9d23ebf0d98ee14a50ca2b9ab299340_JC.exe
Size

16KB
MD5

b9d23ebf0d98ee14a50ca2b9ab299340
SHA1

2e7c50f09b4cae3f009b43bca8f2ef58afa6f653
SHA256

d7d2d26c1b2c192c2536e84635831ce86db39554673d04dc088e76ca8cf5803a
SHA512

4f21eb3aa821d36e0e7c6eaf5d445aa2f59ff4f7682376086615cb75ffd7b62d853b6b70cb5f99d5b4a45256c2141d32f22df153941962425db0a5858ca6018d
SSDEEP

384:E/58v9DqiTZY0U1IsXG7RWyaFcwaI+LRn6/Rs3p1b:zvtqiTZDBWDcB0s3rb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b9d23ebf0d98ee14a50ca2b9ab299340_JC.exe

Files

NEAS.b9d23ebf0d98ee14a50ca2b9ab299340_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 188B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ