NEAS[.]117ddf302816aea5529d62b96a151a90_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.117ddf302816aea5529d62b96a151a90_JC.exe
Size

17KB
MD5

117ddf302816aea5529d62b96a151a90
SHA1

5dd9cd7c85be3693c6e94697f90ec9d3798fb846
SHA256

9e8ce3483a636b2d2ff233267c511086569b3277fab663ab3ceb83d24ac916ae
SHA512

2b0fb885152a96a10153d49747a8f885f483c1fc07fa8c29f9646989e6a6047ea26846076a3a44d80bc8c376bb50a05eab234e546470e5cf166c8c287c5e03b5
SSDEEP

384:+YBHtfezAF/yRY4PhVqxvPcJ6YwvqJZxja/TXKP577xM:LZL//4novqJZxjabXKx77xM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.117ddf302816aea5529d62b96a151a90_JC.exe

Files

NEAS.117ddf302816aea5529d62b96a151a90_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ