NEAS[.]eaa1a26dee868eb0a41ee300d7e47b50_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.eaa1a26dee868eb0a41ee300d7e47b50_JC.exe
Size

43KB
MD5

eaa1a26dee868eb0a41ee300d7e47b50
SHA1

88844072252108aa50f5ebbb78edd5e768020c9f
SHA256

9c442a324e91c1fae6c691c659ea349916b26fb1e6aa627f63712c6e2635d7ac
SHA512

1f7327804eb55c15d2ef026aadb7a0ccb0a01609c66e2130092319deae3e40726ad19ade9d2c6700b4f7ab50a30424924c9e3e7a696460e530c4f75ed80d6867
SSDEEP

768:8Hj3rRyrFwqeyr2ZZe42qo2QkhDRiAF2OoxlENve:8k5eFjFo2Q4Dqt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.eaa1a26dee868eb0a41ee300d7e47b50_JC.exe

Files

NEAS.eaa1a26dee868eb0a41ee300d7e47b50_JC.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ