NEAS[.]741fb54598b41b82557a7e8d813a6860_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.741fb54598b41b82557a7e8d813a6860_JC.exe
Size

3.0MB
MD5

741fb54598b41b82557a7e8d813a6860
SHA1

975b6a83df3330cac55794ae8bb9b3b4d1eef530
SHA256

53764ace3fe4b65ab0d387c3d15b6ad2ef7745f4f8d2c30fc8b2e68f8861eeb2
SHA512

d698c38071f5c1083f8b312d0b79d5ac5c0ba8c784b9c94dd40c4065669434b794c43f23b12c3ca67c68652ca2c4cdfb9ab4e4ae9ecdbc666fdf7961137151a7
SSDEEP

49152:pZINO9Wp5UON4jvCh90mLI5TbMtjmUL0kpj7bmZfUQmcZY6sKsir3sdj8PjhROXP:v5y3KDI9pKALo5UnENsKsiQ6NJ8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.741fb54598b41b82557a7e8d813a6860_JC.exe

Files

NEAS.741fb54598b41b82557a7e8d813a6860_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ