NEAS[.]ef148599a48ac8bc856e472a170f3640_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ef148599a48ac8bc856e472a170f3640_JC.exe
Size

70KB
MD5

ef148599a48ac8bc856e472a170f3640
SHA1

9fde5a5c2ba3ad33e2d03031dd27a9deeff2e016
SHA256

800a03d4b14ab73aab6daf25b071b2f1609a199de842e21457c4db7197055106
SHA512

5b686451934a1a02b7838cca2b232a441405a83c251ef06970f023fb403f9f22cde20f207b537b551fac66d7777ecc2c6fd09e889affaf8fa083fa1d535f440d
SSDEEP

1536:YAowfUJFgjT284U+w2EwRz6OlvaeEpIaCtwUaSvcmGCCCCCCC+EaEAEtHjCCCCUI:YAowyFgjTiUkEwt6OlvaeEpIaCtwUaSn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ef148599a48ac8bc856e472a170f3640_JC.exe

Files

NEAS.ef148599a48ac8bc856e472a170f3640_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.nsp0
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp1
Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nsp2
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE