NEAS[.]a727b51de55e38236ef650933faad8b0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a727b51de55e38236ef650933faad8b0_JC.exe
Size

84KB
MD5

a727b51de55e38236ef650933faad8b0
SHA1

5048f4d4da6ac70ca27d0227e92e34dc500f621d
SHA256

23ebd098e0422d3d5bf63e445dedad97a8c390eccb895451734ef333e79899cd
SHA512

28d4ba874c338952cf68ea603b2dc24505da03871e441ef487b4fcd2ad4808915b43cb8907f3d9b7e06a78ddd285b6f9e4a225478c210158b0fbb6a07efc599e
SSDEEP

1536:M9AL2mBuerVgYqM9gchyHOllg3qClQX2oooD+AyxArwIVJ9dMNK:MVm4rYxFyHOl+a8QXMmwI/wK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a727b51de55e38236ef650933faad8b0_JC.exe

Files

NEAS.a727b51de55e38236ef650933faad8b0_JC.exe
.exe windows:4 windows x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 36KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE