NEAS[.]d9305770b4d30c65e6c07c397f7e0750_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d9305770b4d30c65e6c07c397f7e0750_JC.exe
Size

8.4MB
MD5

d9305770b4d30c65e6c07c397f7e0750
SHA1

3fc7c4a71cf762e781b41d5c9d36f57102252592
SHA256

a55e56497ceb4577607a15cdcf0b6b9a3bf6c4dc79260e50800fbc31c7766130
SHA512

29b223bd0f66966117c639618d52d4334a4ea1896b6d88392f3972c5476666274d616ffa27a34195f8d914382c688437c7d83a10b03ccd881a8214fbe8bbffb8
SSDEEP

196608:wGo1fMHcCwvblRE65ShGgFpxLph3zDItFxi5wNvFwf:po1fOwvbw65+GgFpxTDeFxi56twf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d9305770b4d30c65e6c07c397f7e0750_JC.exe

Files

NEAS.d9305770b4d30c65e6c07c397f7e0750_JC.exe
.exe windows:1 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ