NEAS[.]14b5137babbea4db7b8c69e430e83110_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.14b5137babbea4db7b8c69e430e83110_JC.exe
Size

1.5MB
MD5

14b5137babbea4db7b8c69e430e83110
SHA1

245686091ffd16ccef35b28230a186289569d464
SHA256

ee23cee331d67922b2c01fd0aa4da4f9630035527e916532499acf45afa7967a
SHA512

4b28e28d2721b8f4e295bd173cfaa911a4aa71b665f15f66abd6a43a261ccf64562982ff1bcb482323a22e33cdf9aad4529672709984b076c2720b8de93b6bd0
SSDEEP

49152:fx1xiO//FPeOMT/E9ZuTsg1t9ZuTsg1+:fx1xT/56E9Z1g1t9Z1g1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.14b5137babbea4db7b8c69e430e83110_JC.exe

Files

NEAS.14b5137babbea4db7b8c69e430e83110_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 28B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ