NEAS[.]15dd620a4c6cabab99c4231857d195d0_JC[.]exe | Triage

Sharing

General

Target

NEAS.15dd620a4c6cabab99c4231857d195d0_JC.exe
Size

472KB
MD5

15dd620a4c6cabab99c4231857d195d0
SHA1

838968a47fb7786d6068f669b8c1dce498bf5c5f
SHA256

1da3bcdddf6c5111080dc7809ca958be5058ac753c2d2666d36f09f3355addad
SHA512

547e0b948bf8e109ac742d8f6c23f59584967be1d8861dfc7cc3111791d8372633095bad952be84bda2a01060ff8d49ad8d689039a7417642f260d40daafeb0b
SSDEEP

3072:4A8RinudiP52xx67lLdKiHDoyhkcPrG9pa2esIS3EpVQTh0:4lkgiPA6RkPyhkKrGb4ScB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.15dd620a4c6cabab99c4231857d195d0_JC.exe

Files

NEAS.15dd620a4c6cabab99c4231857d195d0_JC.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ