NEAS[.]550596793439548fd51296583194d6f0_JC[.]exe | Triage

Sharing

General

Target

NEAS.550596793439548fd51296583194d6f0_JC.exe
Size

30KB
MD5

550596793439548fd51296583194d6f0
SHA1

7bd3d9f7b820f03d50a09d7828298470884b8461
SHA256

dcfcb42226d90439fca8b420616bdd9e37dc78c1114296c9fc206d84a0d135d1
SHA512

5acbe66f63d632c04605f1337fb22c8ca75cfbf4c1aa68581ee2470fa46c4b10e1168be52697922c9ba634fb44456b4e8f6e4078f586b2b95291704b7eb7df82
SSDEEP

48:IlAks/oKtrdeeqx/f/KuV/zQ/ZC0f/ZT4WCaZwa3ildAm0aLrq9NZ8qaWKIqUj6W:IGkP7pnKyzCH7yEilmrZHvvYrO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.550596793439548fd51296583194d6f0_JC.exe

Files

NEAS.550596793439548fd51296583194d6f0_JC.exe
.dll windows:4 windows x86

6c8408bb5d7d5a5b75b9314f94e68763

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls

Sections

.text
Size: 4KB - Virtual size: 160B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 4KB - Virtual size: 148B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 4KB - Virtual size: 183B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ