NEAS[.]2dee2eb07582dd49925163b902b81ff0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2dee2eb07582dd49925163b902b81ff0_JC.exe
Size

8.6MB
MD5

2dee2eb07582dd49925163b902b81ff0
SHA1

50ecc893b643ce66f87084788e448b3a1dc2b8f0
SHA256

abdf6ff0b51d0d564b93f39a02cbfd6978303b024abf11c1ebdd1e546d7df902
SHA512

c1a91e5211cb5964aa319aab41685405c1c0e104b5eaf5cd355c3226be61b5d3645e0e4c2454a4612cb5d3771986c460daa7345625e625c389a73e74cc737e32
SSDEEP

196608:uKZqxYY5DedCBxGQOhAuSH82edLXGv9toSQ9Pp6INBk49X9JJ+:fZuYeidCB85f11jM9toSQ9R6INBk49X4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2dee2eb07582dd49925163b902b81ff0_JC.exe

Files

NEAS.2dee2eb07582dd49925163b902b81ff0_JC.exe
.exe windows:1 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ