NEAS[.]aabda075977af3db0040d98dfea05820_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.aabda075977af3db0040d98dfea05820_JC.exe
Size

158KB
MD5

aabda075977af3db0040d98dfea05820
SHA1

1273d833b7fceb7cb23149b4472cec67bc180697
SHA256

90838590be27da55407d6071bbffcb4124355870c52aa551519e3cc10c3a9c19
SHA512

08b49d3379dcbb3b4ada3b9fc24fdd9689afdb86fea01f75d2e07bd6503f926ae75f03c0d81b0435b0bbc8d9a73b72661c76b16a49a3c52b163c100051024d7a
SSDEEP

3072:53PahBI1X2rRXttba+OQ0s3GIzzJtKsTZe1UeHRXTL:RP+I2rB+L0zdtKsTZe1UE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.aabda075977af3db0040d98dfea05820_JC.exe

Files

NEAS.aabda075977af3db0040d98dfea05820_JC.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 81KB - Virtual size: 81KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ