NEAS[.]a411a2f05c8a38979efa2f16bfd1adb0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a411a2f05c8a38979efa2f16bfd1adb0_JC.exe
Size

4.5MB
MD5

a411a2f05c8a38979efa2f16bfd1adb0
SHA1

63924a99808b1b6ff03c97855b541aca4c9f1763
SHA256

23d276d178c003b0ede1c1a0ace51c678dfa019e33ea8ad82333c0947104a2da
SHA512

a174a0081a7f982cb6ea536f37b0d49b75f2d4b35310bcb6f52ea9abde719179c319cdce8b25fa9e8a02ad6346cfd98d339bd1b14b3bc53e2af94d4a06fb5ddd
SSDEEP

98304:picJbB6HwfBZSPq1BjcfwNmmnyvbUObIqn8e+E+exmCsb6S:piCgfP5Y8aObIq8er+ewAS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a411a2f05c8a38979efa2f16bfd1adb0_JC.exe

Files

NEAS.a411a2f05c8a38979efa2f16bfd1adb0_JC.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 776B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ