NEAS[.]9bfb4dff1784d0245884ece174f4c370_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9bfb4dff1784d0245884ece174f4c370_JC.exe
Size

898KB
MD5

9bfb4dff1784d0245884ece174f4c370
SHA1

d53469e219ca26957ff6a3d2afadf1ca90f99234
SHA256

732aaff5a919dc391d5df6c6ddabe338cf98d3ec651a2472e8a403f9b79a3603
SHA512

c17cbf0b1766f80a2d7645250d4e04a261bd63b42548e83959ec849c569450e91583af608370f3e4846d8fe781f3777ac561bad88a39fd456822fb50010f8de9
SSDEEP

24576:RSNW/c//////UxgYexREi/s7tLYxZdiTozx8brO4XU:Rfc//////UxgYexr8LYjd2ixP4X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9bfb4dff1784d0245884ece174f4c370_JC.exe

Files

NEAS.9bfb4dff1784d0245884ece174f4c370_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

madTraceProcess

Sections

CODE
Size: 733KB - Virtual size: 732KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 78B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: - Virtual size: 556B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 89KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ