NEAS[.]ecbf9b6b5b7b955a3b5e77ceca2ab210_JC[.]exe | Triage

Sharing

General

Target

NEAS.ecbf9b6b5b7b955a3b5e77ceca2ab210_JC.exe
Size

2.2MB
MD5

ecbf9b6b5b7b955a3b5e77ceca2ab210
SHA1

33f2fdecc3759faaaeca786435368fcbe6900834
SHA256

48c242ecedf7e7477514ffe6e1c08f81407cecb8302edd70a8d0bceedae14604
SHA512

0d8488aa3e921c4aae7f4eca71b62631d8a0c0f4cc0ff39f5e00be93d304e2b3cd1cf0e3d8223be4b9eb6ddd321bc6ed027fc97ffd82a5176cdbd5e332d5588c
SSDEEP

49152:gYzAIbXAB/tZc/1GSOcc1UkucCkBxlmQwRuSKxQ6+/b:gYk4QB/tZc/1Vc1ZfCUlmQwRyxQrb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ecbf9b6b5b7b955a3b5e77ceca2ab210_JC.exe

Files

NEAS.ecbf9b6b5b7b955a3b5e77ceca2ab210_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 730KB - Virtual size: 729KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ