NEAS[.]d8685aa04f7bcabbbe332d55dac5c030_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d8685aa04f7bcabbbe332d55dac5c030_JC.exe
Size

804KB
MD5

d8685aa04f7bcabbbe332d55dac5c030
SHA1

259d0824130d620973f6e4b9ee73ccd6232432c2
SHA256

f77bb9beed7b0ac3e8f3bdf942739b7fa73a3450319b3316097e10cf8763f6ef
SHA512

ae06fbac5097a9e614735a368c1d20fbf08af0e78fb4cdcdf5e37d908ef7a023805aee605b6b55da34324b62e3a5cd4af0cf1e3ea84d9f261ee8298894a7c95b
SSDEEP

12288:NfH0jEm1VuuelIbWydfDMj4Q9eclxJxSWmtru4UaS:Nf0ZuuelIqWLvwlxAru4Ua

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d8685aa04f7bcabbbe332d55dac5c030_JC.exe

Files

NEAS.d8685aa04f7bcabbbe332d55dac5c030_JC.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 161KB - Virtual size: 161KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 117KB - Virtual size: 117KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ