NEAS[.]ba6f4b9d737e8634e4128a388dd65f80_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ba6f4b9d737e8634e4128a388dd65f80_JC.exe
Size

571KB
MD5

ba6f4b9d737e8634e4128a388dd65f80
SHA1

1ed904dd069e8f027130f181355b8a99579bd7c0
SHA256

0bde4b2f5820ec62e10fb395150132d09528fb7c9e2dc18a796afa02cb0cf697
SHA512

c38895cd10c8d168c79bd54b25884bf57f30a5ce8fc59ad6b3a73508e3b591c02ea17f72c6d55568db6a7a94f0fac9f9e210af19bf73a96a5f21687c71084c80
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5iinNrv2zGJIKVZicAnA2Df1sm0p8kdHxsIcjYWU:/pW2IoioS6lVDNxsIcjYWYAa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ba6f4b9d737e8634e4128a388dd65f80_JC.exe

Files

NEAS.ba6f4b9d737e8634e4128a388dd65f80_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ