NEAS[.]232bf6eb57da21d6864275282826f760_JC[.]exe | Triage

Sharing

General

Target

NEAS.232bf6eb57da21d6864275282826f760_JC.exe
Size

4.0MB
MD5

232bf6eb57da21d6864275282826f760
SHA1

bff6506b18ada39628a139d38a95095308bf7b4e
SHA256

3f65a48a267d27a708df688e72e29d1e21c424a1c2a765715fcca07015ba91ef
SHA512

2e3092b3a0fe45b05241a07b985bdb08bbe671be694e829a8418a8836e05adaca91c0f8ee2f9fdd366fcc2f624a4e4fcb6310269b41b9a998c96c9615104e964
SSDEEP

98304:xIiqp/+yulzhzgss5JR3K0F/TT2xDJLu3BlFQ44:xaV+Nl1UJRfTCx1SL4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.232bf6eb57da21d6864275282826f760_JC.exe

Files

NEAS.232bf6eb57da21d6864275282826f760_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 3.9MB - Virtual size: 3.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ