NEAS[.]6a4806b243cd361b232fee77d06c5d00_JC[.]exe | Triage

Sharing

General

Target

NEAS.6a4806b243cd361b232fee77d06c5d00_JC.exe
Size

336KB
MD5

6a4806b243cd361b232fee77d06c5d00
SHA1

6c325dafa8e3397055936f1f5544f4e13bed4033
SHA256

8b8957750bbcf5df20035693402fd4a69466d3340d5503a062e1f2cc86d95d9d
SHA512

89ae06564176db12b45995be8373843d663ee0f2a3b130c6637213fac023784ee94f03c77db30b9b62913bedc27356726abc07c7af9cefb50465ae7efbc92604
SSDEEP

3072:abJ8MJJ/pZ22HPc+Q0j40UvWw48ddLM6hMLIokjwrhpcSvMpE1:s5XG20ka48ddLM6njNSR1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6a4806b243cd361b232fee77d06c5d00_JC.exe

Files

NEAS.6a4806b243cd361b232fee77d06c5d00_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 207KB - Virtual size: 206KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data4
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ