NEAS[.]4d5c09d17834e308383797d82979e410_JC[.]exe | Triage

Sharing

General

Target

NEAS.4d5c09d17834e308383797d82979e410_JC.exe
Size

199KB
MD5

4d5c09d17834e308383797d82979e410
SHA1

dcdb03b94676c1103f35f53eef653c7c56edde59
SHA256

a01d5c4cb5ec18ed158c3105c2841feb196fcadee11ef63a0ab724eab9ef248b
SHA512

5dd16895e6dd8c481ebb1b50147f2d019bf0ab753c86e4355bdaf3b0b05ffe9549fcda4491013ed1a3ded3f081fc3d96272d969196cac4c5dfc54df82f4b92a1
SSDEEP

3072:yxBRuVM34k8CgeD3n30jMI5CJ0wdE2qsL2hqMASWbshmORlzpQj6rtFI6uyfua0m:y3RzFr3aOJddx2GSWYhmORlzKKCcFf+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4d5c09d17834e308383797d82979e410_JC.exe

Files

NEAS.4d5c09d17834e308383797d82979e410_JC.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ