NEAS[.]5476d29868ba34eaedbfabdd4f95b2c0_JC[.]exe | Triage

Sharing

General

Target

NEAS.5476d29868ba34eaedbfabdd4f95b2c0_JC.exe
Size

288KB
MD5

5476d29868ba34eaedbfabdd4f95b2c0
SHA1

e89e7952acf42bf154717e51dfd02d266567b732
SHA256

7ae24ec9fd05049f914359be3f10d0d8814ab13059aa3c917e186108e9a871ac
SHA512

be8e41352c64e7f21ee8e6790dde5b31c7dcfc8f3f1286a8b7350bcea72663efc9b181586408ff0b13f4ccc41794bd72924ae86efeaa477156a530c675f409b0
SSDEEP

3072:HcDDERwfh6IkMFvF2ax4NVbV1IHIKQ8wt6NHdad5TgkYU:SD7fL+LV119T+U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5476d29868ba34eaedbfabdd4f95b2c0_JC.exe

Files

NEAS.5476d29868ba34eaedbfabdd4f95b2c0_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 271KB - Virtual size: 270KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ