NEAS[.]789b780e7d48f0ddf530e5f255ba75e0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.789b780e7d48f0ddf530e5f255ba75e0_JC.exe
Size

1.0MB
MD5

789b780e7d48f0ddf530e5f255ba75e0
SHA1

069b086675354bf72faa031f887e53ca80b51e75
SHA256

05cb6de8190a1f016694e92e9481cc5e7566e1f7dd3a951fa87158b089a6903c
SHA512

432de5becd94f72249f917c3d3e895b3e3f76336da67947062b3451d5c44d7f774136d9a9b8fe9e430f8fea96015518311139265880997daf3114fd4a4e5212f
SSDEEP

12288:odhj0B28qvEq9yzRssJm4yQSbkxq8FhlmlnOT2mfelzOcpIuyPI1f9OAu8BVc+en:GM1hJm4yQSf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.789b780e7d48f0ddf530e5f255ba75e0_JC.exe

Files

NEAS.789b780e7d48f0ddf530e5f255ba75e0_JC.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

GetInstallDetailsPayload
SignalInitializeCrashReporting

Sections

.text
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 140B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 775KB - Virtual size: 775KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 976B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ