NEAS[.]c6bd302ca252e76c0d2174306a4d6ca0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c6bd302ca252e76c0d2174306a4d6ca0_JC.exe
Size

432KB
MD5

c6bd302ca252e76c0d2174306a4d6ca0
SHA1

8f43e0d9e4565ef11a4af6721b7736920f025a5c
SHA256

76b1ddc0f6e39695f877e5d45a5f2475c2bc0b74c4928d3546c4fac8939cbcf6
SHA512

a8c14c291eff3879b31356eaadea75ef3aae8a11b2a0ce238d07e9069d8ed13968f37ac5c0b27c5bc5afdd137a9ed3f91fe7fd9b9ccc605408d4658fc5811d6c
SSDEEP

6144:r8kKVaTARZQRMp1yEX3kvAuROf/+ceSvin:QPVQARZIMr3X3kvAuS/+ceS6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c6bd302ca252e76c0d2174306a4d6ca0_JC.exe

Files

NEAS.c6bd302ca252e76c0d2174306a4d6ca0_JC.exe
.exe windows:5 windows x86

4a2617be29079c89cfaddec691bc871c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

tpsvcbase

ord1

Sections

.tp3
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tp3
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tp3
Size: 1024B - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tp3
Size: 315KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tp3
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE