NEAS[.]da5dfbc763c04b3d4f4cda19ac6bdaa0_JC[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.da5dfbc763c04b3d4f4cda19ac6bdaa0_JC.exe
Size

475KB
MD5

da5dfbc763c04b3d4f4cda19ac6bdaa0
SHA1

2803ee59a814b0bea9764f7cdf5e7db6ed9fb253
SHA256

4b011df2b73119f24c69783e61b9dfadc9a25e5692b3639423f70bebfac7e6d7
SHA512

ab6965a350f54cc37e2640d1fe4fae8a4be2b96b6bce001fb04b88e7ef35d6f70d92072bb6c76ce078a185955a2046040a30949ab40571d80bbe518f04f3d24c
SSDEEP

6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElw:nRDc3yWDNU+YUznzNjElWaT07NQtw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.da5dfbc763c04b3d4f4cda19ac6bdaa0_JC.exe

Files

NEAS.da5dfbc763c04b3d4f4cda19ac6bdaa0_JC.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ