NEAS[.]0af1aaa349032f033e8b2a484770b260_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0af1aaa349032f033e8b2a484770b260_JC.exe
Size

715KB
MD5

0af1aaa349032f033e8b2a484770b260
SHA1

1e15c2c82e563110d108f2afa6ce15ae26c10d09
SHA256

24ba535289c421a3663b91316440ae8b9e0a7414d6044fc698ec78ef95cf3a2c
SHA512

0b95b0f6523e5cbbf4f259f9010a29b7f5ce458c43c6bbde91dceee2ab16dba96147bfe1180514b6f8ce941500d390d4df22920a5d49c9f5ff90cf3bdf405160
SSDEEP

12288:xLiQeMviKjfca6AMQFpSkzp3L6vrLxVWIwsuKUto3Ugbtqo4:xmgiNAVfhWvrLz2KUGbAo4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0af1aaa349032f033e8b2a484770b260_JC.exe

Files

NEAS.0af1aaa349032f033e8b2a484770b260_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 585KB - Virtual size: 585KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ