NEAS[.]ba3ab12bc2926118949ffe006f5885c0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ba3ab12bc2926118949ffe006f5885c0_JC.exe
Size

18KB
MD5

ba3ab12bc2926118949ffe006f5885c0
SHA1

0be644f65253ecc5e9d7fd931d78eb5f35c2eb93
SHA256

e07ca6d7fbf183f3a9fba575fed6223f90ad6c3c1a2dc9fe44af4bafe8ce57bd
SHA512

f35159c7496f3a343ac956263340f22c8da867684749a58524cb753d35b78dc4e764c2833226ba36a9ec2e815ea1ab082de63b2d807e4c263629dd764df044bb
SSDEEP

192:E/LvLAvLCvLAvLD/igCA8Z8un4WHI9Nn4WHIj6n6CPIpmGqZDSZGqZDScZsTZ1xa:E/+/L8Z8UxyVxzISSjScZsTZ19qx9qA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ba3ab12bc2926118949ffe006f5885c0_JC.exe

Files

NEAS.ba3ab12bc2926118949ffe006f5885c0_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ