NEAS[.]f116291e9940be107cf143fb4e02b7a0_JC[.]exe | Triage

Sharing

General

Target

NEAS.f116291e9940be107cf143fb4e02b7a0_JC.exe
Size

224KB
MD5

f116291e9940be107cf143fb4e02b7a0
SHA1

1c09343ab459b2b50e0fd95b1b778c9fc5f2fef0
SHA256

dbaa73ae7192f8335343640111815aa16fc3255e977464642e9d65d8687cff94
SHA512

e77396ab5f313301bb0aaadef60b73cb6497b3d5071e862ffa1e096a8987520008b73dbfe1840fda24b6ee18346a03b635e794e7dc4e54ee3fb6bf0c8f78e846
SSDEEP

3072:dsXRmUIMitPqQIZe27vc+Eld+xZp2vPRL1tT06zJoxAWBcKpSP//dwBmf5P:KR5ITqQIZeGk7RZBGxAycKpSPX2e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f116291e9940be107cf143fb4e02b7a0_JC.exe

Files

NEAS.f116291e9940be107cf143fb4e02b7a0_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.l2
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ