NEAS[.]b59ecf294ad6177be234ff6123a2c6f0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b59ecf294ad6177be234ff6123a2c6f0_JC.exe
Size

281KB
MD5

b59ecf294ad6177be234ff6123a2c6f0
SHA1

dab760bcce7f9fe3673b9668ab383c586cd5cff3
SHA256

3b47be83d5d1a5ff87e649d5a4b669a0a687bc13d18660c62272d08921a46e87
SHA512

3b56fd78ed393f2a8da05b145c6346bde791868642b6ba8f7dee9115f0a5bb0e504af153d429f25f2f6e8506d4aa5d10dac53e37abdc453fd40408232c9cee8f
SSDEEP

1536:06gyoOYeTDonZAAi595VnYmfWxInW8hfXFpH8jkxb7Q:0LBnZAvnYBWnW8hf1pgaQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b59ecf294ad6177be234ff6123a2c6f0_JC.exe

Files

NEAS.b59ecf294ad6177be234ff6123a2c6f0_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ