NEAS[.]060568dbe3f966b3e723c80b3bb92860_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.060568dbe3f966b3e723c80b3bb92860_JC.exe
Size

256KB
MD5

060568dbe3f966b3e723c80b3bb92860
SHA1

2a54615544e203e6f604cb37701a8682c4c67162
SHA256

e7c8156a1f51cb4a46580b325cd27330878d832325594ec63c33ff4dd36bedb2
SHA512

32e7748bc1fcd25b200a574edc3365af23c1949c137bcb36a5aa71fed800b9c06b49caeb6eaa662c3ffa934c8d35402382f315ad7ffbf87558effb9d6162814f
SSDEEP

6144:bLBEu0W6scVNOtQesO9VFuWIptGvRKRBGebdh:bLBqBmb17cWEt6AoWdh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.060568dbe3f966b3e723c80b3bb92860_JC.exe

Files

NEAS.060568dbe3f966b3e723c80b3bb92860_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

??4_Init_locks@std@@QAEAAV01@ABV01@@Z

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.spm
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE