NEAS[.]ba18339b942b56e0c129e9fd834b1bf0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ba18339b942b56e0c129e9fd834b1bf0_JC.exe
Size

100KB
MD5

ba18339b942b56e0c129e9fd834b1bf0
SHA1

7dedcfa683fbf9d9c95403ee4fafab88d2eed0f1
SHA256

573706f6972f8293e9f36576995242ed2cfab06a571a19efe79677078263e8dd
SHA512

5856ce6722cb00225081f70734583581eb8f1628c05024b0db40a5c8bae5f31ae3f499df93d8c1e74c0e82a70601ba5c9da1844c9b84320955e75f52f2a0d435
SSDEEP

3072:vAowugFgjTiUkEwtkXoUTiUkEwtHaeEpIaCtwUaSvcmGCCCCCCC+EaEAEtHjCCC1:oabjGUkfBUGUkfC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ba18339b942b56e0c129e9fd834b1bf0_JC.exe

Files

NEAS.ba18339b942b56e0c129e9fd834b1bf0_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.nsp0
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE