NEAS[.]5ba8b7d3799c6972cd67a88022d69680_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5ba8b7d3799c6972cd67a88022d69680_JC.exe
Size

220KB
MD5

5ba8b7d3799c6972cd67a88022d69680
SHA1

37ef93bffff3d96dbe703a56a3173a1f823375f8
SHA256

b28d1cc6532c37c29964afd8b4162cde8523b725790b4e9a4992487df8849505
SHA512

4c7dabfbc548a717138abbd9237cb313924e6585db4183dc72f87d4da5f7727269ad2c03e90636445123c003f43f02181c528d9efc5fa51fbbb99256267cd5af
SSDEEP

768:Dv1aAFA6pch6xV5FU3pWP3cH8p+1XYLTAYSIc3odJNRl06ouJfuCHW/6Mkycuri0:7YlZh6xVfU5WPsH8MYgmDyucCs6d

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5ba8b7d3799c6972cd67a88022d69680_JC.exe

Files

NEAS.5ba8b7d3799c6972cd67a88022d69680_JC.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ