NEAS[.]004b146c3ab35dc40164e3449aca6a90_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.004b146c3ab35dc40164e3449aca6a90_JC.exe
Size

897KB
MD5

004b146c3ab35dc40164e3449aca6a90
SHA1

8b2470e1fd9f469be09317c9960f763b8e95dbd8
SHA256

864ae57ea529ef0cbc37471d85731d587b1220f5de8e727bb912717603f62f2a
SHA512

e298d8a1cebdcdb4da397b098db0285c1bcd55178b71ddcd743cb35ac1f463d2347d1d1d9b099f01daee99914b507ed48f444a9360c779b5aaac6a07086c3639
SSDEEP

12288:/0jr5+MR0deABOyn+JaVgS30l6hRw0oJE+95jzwvuEfbJ6Kxc:Mjr54deUncaVgjJF95PEfFxc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.004b146c3ab35dc40164e3449aca6a90_JC.exe

Files

NEAS.004b146c3ab35dc40164e3449aca6a90_JC.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Exports

Exports

??4COWSAllocator@@QAEAAV0@ABV0@@Z
___mb_cur_max_func

Sections

.text
Size: 86KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.cdata
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 625KB - Virtual size: 625KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tqn
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE