NEAS[.]052ab851bd6382319990b7cbc457c7f0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.052ab851bd6382319990b7cbc457c7f0_JC.exe
Size

180KB
MD5

052ab851bd6382319990b7cbc457c7f0
SHA1

8fd6e405a659497041c63b08fbdd6be1d36ec35c
SHA256

173392b523100aa38c4c6ff602704f85de3b79f8c9dcd133505245ffcab954b9
SHA512

fca0b263af2754be0d633383e99c8253a942f2a12c8a0a5f64761823ed9366f8b4e48d56fb7949ba545d7552906d0dcb4ae236ce507b361820aa06a1a94e0a73
SSDEEP

3072:+ktsQYgw1WsX//YTtFJKRxzd1L/rwmA3FW0u1R0dSiBxVsxR1TLO/j9OjGR03:Kgw5XcxCjLkmAj3sHlOsi0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.052ab851bd6382319990b7cbc457c7f0_JC.exe

Files

NEAS.052ab851bd6382319990b7cbc457c7f0_JC.exe
.exe windows:4 windows x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 68KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE