NEAS[.]5ab34d349cd7883a0e0656b13274b420_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5ab34d349cd7883a0e0656b13274b420_JC.exe
Size

386KB
MD5

5ab34d349cd7883a0e0656b13274b420
SHA1

6f758c16185f53b5fa40df80b93514697de964b6
SHA256

96549008f29ef7c71c34df737d3eb03330e2fb9f70c053c200b3c40b9efcc232
SHA512

808d6054a29728fbc981c85af6cb9a4626962770b4bdfbee068a7df67c9840d3496c86d40f00a177afc23488c7106f3840f6d0c8161c92e7996a624752aa9668
SSDEEP

6144:PIA1NsBofCZYdgTNrZfOyVK+f/Px5pwkVF0KtvUlIDcrGe1nFch8QFdAGs7+WyIz:PIA1r902efmF9cdjjCS1Qj6IB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5ab34d349cd7883a0e0656b13274b420_JC.exe

Files

NEAS.5ab34d349cd7883a0e0656b13274b420_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ