NEAS[.]cb24ea08bea381c2ea2fc83b38ca4fe0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cb24ea08bea381c2ea2fc83b38ca4fe0_JC.exe
Size

100KB
MD5

cb24ea08bea381c2ea2fc83b38ca4fe0
SHA1

b3981c59066133a6ef2c241ef77b05b2160cfb7c
SHA256

e44e9718afbb5fa82ceb046bef0b70b5ffe84683a8bfcfeba4791dd574c9b485
SHA512

da69eb0102d9d70d6acf660320c7f4b082c2ec239d4a2a1403da49897b3556e5f4a6f94d57e99061d7a0191fdcf454dc9a31e54407376ae2b2a4a0e01da3e34e
SSDEEP

3072:IQbMNFS1EgphGwOspIKhCCTJGjhiJ/Eq1k98ybU+bA/:PbMbXgphGwRpImCCTJGjhwHCUN/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cb24ea08bea381c2ea2fc83b38ca4fe0_JC.exe

Files

NEAS.cb24ea08bea381c2ea2fc83b38ca4fe0_JC.exe
.exe windows:5 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 216KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 512B - Virtual size: 292B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 33B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ