NEAS[.]bc99f3be7ebe3c78359df75838445bc0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bc99f3be7ebe3c78359df75838445bc0_JC.exe
Size

230KB
MD5

bc99f3be7ebe3c78359df75838445bc0
SHA1

9ca2a72ed53030f57b68841c424ed4d01a63fdb7
SHA256

6c7a52b42a450168e4a00a774758248e6c2b15d5f6dac810500095a631695aaa
SHA512

2d604635506a58c7f427d7f9a23aa78fd822f9b8be3e6e3bd83d852fcba2dd83ed5602a34fe91d4523f5c2d15317e8f0c516b4f36029366fe50520f4c79925d3
SSDEEP

3072:E+qdKLnRMNakpisJIinUi6cSpCsrZVjG/zMo1gAWTvr2vP8eN:VkpP6npCGVq/zazrK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bc99f3be7ebe3c78359df75838445bc0_JC.exe

Files

NEAS.bc99f3be7ebe3c78359df75838445bc0_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ