NEAS[.]1f5d50e1ee6e3efed026c835e87ee8d0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1f5d50e1ee6e3efed026c835e87ee8d0_JC.exe
Size

1.8MB
MD5

1f5d50e1ee6e3efed026c835e87ee8d0
SHA1

33ee101b238d8e401ccc854bc3f7d1c4b0f4296c
SHA256

35a9b7ab733d674bea53a8af4cd576180ae0cb3d82abbb8758045d76426e2660
SHA512

952d98901e5936bf1b1d2276fb4342234d403b6cd8d9391030b210842cf38655fb05c3f7ee4f827aadd0750d0243c6a73369a05c2dd71feedfe248be1865d0ba
SSDEEP

24576:FmnSfg9gJohe/KfoVZQqP7KoF5Ibqva5g0l6HqbsFmDYhY1e/1IopPuWfIZ2T6Pn:VyqA36hW5iSiSpA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1f5d50e1ee6e3efed026c835e87ee8d0_JC.exe

Files

NEAS.1f5d50e1ee6e3efed026c835e87ee8d0_JC.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ