NEAS[.]501f4598717169c7918ad4baf41a8380[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.501f4598717169c7918ad4baf41a8380.exe
Size

49KB
MD5

501f4598717169c7918ad4baf41a8380
SHA1

62256882e3c431cb74529baced275ccd48c9dfeb
SHA256

6f4f347372c653a0addc5bb1b9294568c37ef2c369ee4721c7da40d77c6593ad
SHA512

07317ce284ccdc4de1f08e987a175c96bb8ecc651fc80a4f56eb15174637348f28929c11d5035f8af3773c11d4bde9b2c1721ded7ef52007385ca13a1fbcfbbd
SSDEEP

768:egYtXMPsED3VK2+ZtyOjgO4r9vFAg2rq1:XYtXMYTjipvF20

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.501f4598717169c7918ad4baf41a8380.exe

Files

NEAS.501f4598717169c7918ad4baf41a8380.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata6
Size: 1024B - Virtual size: 816B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ