NEAS[.]9e708e9ab7b5d7b86a617d7bf4c93e70_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9e708e9ab7b5d7b86a617d7bf4c93e70_JC.exe
Size

380KB
MD5

9e708e9ab7b5d7b86a617d7bf4c93e70
SHA1

0b8bad79466010eff0117daba9917c45e8af9670
SHA256

e5109396c5145d494c91865e2ed50ceac612e8d25deaf7a7495340f3a2530c6f
SHA512

6c67632b1340a97a3677895d2cab08c555d7b2c604a0d8e81fc8965e12494e3cdbd654ad443e4f0952e6f02aab595e1092b416b4d896936f8962465c6e949ac3
SSDEEP

3072:M+Oa8AFGMsZI5e+lQla+BC3K5eqU+BC3K5eqYro:DIAFGxIHfK70K7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9e708e9ab7b5d7b86a617d7bf4c93e70_JC.exe

Files

NEAS.9e708e9ab7b5d7b86a617d7bf4c93e70_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ