NEAS[.]451264f8aca85973434535aa24428a20_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.451264f8aca85973434535aa24428a20_JC.exe
Size

70KB
MD5

451264f8aca85973434535aa24428a20
SHA1

946c19435a12f8fd1d4ce7de653d74966c2b1991
SHA256

cc6b22eef7ad5fa69101162df33fca89730c7a0d4a5597e863eb7e64f77c1c65
SHA512

ed8e835ff41c3d45b880506e8aab125ef80e21a7f9ead29fad444c4f06b94105427c8659101442d48ea2e65cd53ff6a0e12d09de97acee1900688dc5ff8b84f7
SSDEEP

1536:JFplSbm1rtAOrYWHTedqMZCkqrZkkEn4m:JFpsbm1rthzHT9pHEnZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.451264f8aca85973434535aa24428a20_JC.exe

Files

NEAS.451264f8aca85973434535aa24428a20_JC.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

polmxhat

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ