NEAS[.]fa6f86a8c8ec6cac56170cdb3ce42f90_JC[.]exe | Triage

Sharing

General

Target

NEAS.fa6f86a8c8ec6cac56170cdb3ce42f90_JC.exe
Size

228KB
MD5

fa6f86a8c8ec6cac56170cdb3ce42f90
SHA1

2d10cd3a0f46898f07f80bdcf032a35c870fa02b
SHA256

0c332e3d7559920e1494f0d4394b18ad6fbf836d616a96b2d5cb2950e5a9a957
SHA512

28b3805c6eade8a2650a2aa7a2a686952c6185d009503535c857a9bb7d399ad289043153de8cd5e3218a3ecce96ebde170dcfad121d679f33cb513dabe9fd697
SSDEEP

3072:rFBi9nabQQRV5br2PB9d8yKYebrJ5wxO34:ZBipaXL5bUUTHJSL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fa6f86a8c8ec6cac56170cdb3ce42f90_JC.exe

Files

NEAS.fa6f86a8c8ec6cac56170cdb3ce42f90_JC.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ