NEAS[.]0274a83bcff993cd54bed8e5c6b51d80_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0274a83bcff993cd54bed8e5c6b51d80_JC.exe
Size

180KB
MD5

0274a83bcff993cd54bed8e5c6b51d80
SHA1

5ccf8bd3473a3b8dff3862654f9060ae568fcbe5
SHA256

5a692f57a69b745efbd8ebd14b0d080a93922a65d413e932440f28528bdf6802
SHA512

0f9068acb5680289125ac6646d9e0fbfda136eb8b98ae221b9552b6025be7d1120723510c20f8cd1116dacabf3dd523fc71ef08db36b245f3ac93c7b6b5cc621
SSDEEP

3072:qkF7U42paKQIE+DLzcRNmfPETmsb5MXYZaMe7KpBfIgw9R3HmfzN+PV0nFLAQ:C4FzKfAyPETms+IZkmIgGNmsAFLA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0274a83bcff993cd54bed8e5c6b51d80_JC.exe

Files

NEAS.0274a83bcff993cd54bed8e5c6b51d80_JC.exe
.exe windows:4 windows x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 68KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE