NEAS[.]764125f2f3b771d93562431d1b222cc0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.764125f2f3b771d93562431d1b222cc0_JC.exe
Size

136KB
MD5

764125f2f3b771d93562431d1b222cc0
SHA1

608c54c51026367eecd6c2e27f4bfc0ef050a841
SHA256

4e424b8ad6530addf68caf2939a8ce0773628fd4c0aba0294c0e4409a1463f25
SHA512

1ac77aa9702e0991ad776d56d11fdf64967f74781fdaf02ff4776744001b61df2a52746f28cbbb94742a187781fe484cfc6d90793000fe55a3a4652ea937f818
SSDEEP

3072:u6pQc+sSxnTrGadgsFqZeo4pwkhUmZr3hPsOraSo:u6p2sSxTrGvsFUejWyZr3hPswaH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.764125f2f3b771d93562431d1b222cc0_JC.exe

Files

NEAS.764125f2f3b771d93562431d1b222cc0_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 130KB - Virtual size: 172KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE