NEAS[.]2c49f8c84e1d4b8f6fda4eaac78a4fe0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2c49f8c84e1d4b8f6fda4eaac78a4fe0_JC.exe
Size

50KB
MD5

2c49f8c84e1d4b8f6fda4eaac78a4fe0
SHA1

65537c372f12dc17a5ad4853e67b8b16798a1923
SHA256

58c86a346ae6fa8f6eca8e1030e8e3f77cf15bd251f1a5da65a77e93040aaf95
SHA512

ddd8aeb2b5013c2dcc7a5431d289b9ed985570f71654aba27c09125323b69f1e7b3f01e6ab0a2794d2a1f78544868a3b02b2a9e686fb753418699546b5101aa7
SSDEEP

1536:HFWjEZc1PlwFps2VbQmKYy92aNbMFvnQC/:HFWjycJug2VkMy92aNm4C/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2c49f8c84e1d4b8f6fda4eaac78a4fe0_JC.exe

Files

NEAS.2c49f8c84e1d4b8f6fda4eaac78a4fe0_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.madzt
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.uJYBWBr
Size: 1024B - Virtual size: 720B

IMAGE_SCN_MEM_READ