NEAS[.]2de89a155016d90dc9e37f12f6fbec40_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2de89a155016d90dc9e37f12f6fbec40_JC.exe
Size

231KB
MD5

2de89a155016d90dc9e37f12f6fbec40
SHA1

e896dd5d345ba780dff82175a62ebcfbe925a7f3
SHA256

f52081bd41674ba1b7583d026f6f14b5f352104406ffb4abe29d4732d2141b0a
SHA512

2f3edafa9a0f5ac88707d96350b2759c896c89c57687c4a626225f0775a22fce7dd18fbefc3cf668aeb613008355ccee0eeb26769d447e5c2ae59bd0c1654410
SSDEEP

3072:vES5gv8VZCd9XopoobdRu/oraGLYuTdY+fUmtkFqf6NMFRefKb0IQB:5589XYPGoraGFy++MFReIH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2de89a155016d90dc9e37f12f6fbec40_JC.exe

Files

NEAS.2de89a155016d90dc9e37f12f6fbec40_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 228KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ