NEAS[.]4f0cfa9e8d3bbf7386379001b6f2c550_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4f0cfa9e8d3bbf7386379001b6f2c550_JC.exe
Size

1.0MB
MD5

4f0cfa9e8d3bbf7386379001b6f2c550
SHA1

b418d1f1f37dd3dae9e086ba1551884e8076b82d
SHA256

f7597268f216425db6ab8e1723c0f8e92c095648a0a1d1451a3f34b806aae986
SHA512

20f6d62656eeef190cdefda9b52fcf592d2706a868d25905d4101ddda8f7d09b8337826725c48a7d45e5c0341eddc3fe124be7d68fb8fc9a25ae0619c7a80d7f
SSDEEP

12288:2xHGSA6s1D6RxOE81Tw4o6ekZcKOSFYjVDa/ZS9anFHnhvMCtjW:2xHnA6s1WxOH1MWOa/ZSUnxueC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4f0cfa9e8d3bbf7386379001b6f2c550_JC.exe

Files

NEAS.4f0cfa9e8d3bbf7386379001b6f2c550_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 633KB - Virtual size: 632KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.wixburn
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.retplne
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

File Characteristics

Sections

.text Size: 81KB - Virtual size: 81KB

.pdata Size: 4KB - Virtual size: 4KB

.rdata Size: 633KB - Virtual size: 632KB

.bss Size: - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 12B

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 156KB - Virtual size: 156KB

.l1 Size: 4KB - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.wixburn Size: 2KB - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.retplne Size: 1024B - Virtual size: 4KB

.text Size: 5KB - Virtual size: 8KB

.idata Size: 512B - Virtual size: 4KB

.text Size: 512B - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.text
Size: 81KB - Virtual size: 81KB

.pdata
Size: 4KB - Virtual size: 4KB

.rdata
Size: 633KB - Virtual size: 632KB

.bss
Size: - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 12B

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 156KB - Virtual size: 156KB

.l1
Size: 4KB - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.wixburn
Size: 2KB - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.retplne
Size: 1024B - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 8KB

.idata
Size: 512B - Virtual size: 4KB

.text
Size: 512B - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB