NEAS[.]5e5cd4ad7911f1b35864e61bfcf98130[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5e5cd4ad7911f1b35864e61bfcf98130.exe
Size

211KB
MD5

5e5cd4ad7911f1b35864e61bfcf98130
SHA1

61b1b000838c7791b42dec663f75339a1a6e19b9
SHA256

350d38121041fb47514b4735a7542238375a6e3fad67451ac5e81594b1d58713
SHA512

a4f07789f7a7489868cfc10abed0fa1ef6ee024157a9a2f0f1fb3fd6bbe647030ff711653be2ff1694fcc740a0bfc770991e31aad73219a3c2608776beef3a80
SSDEEP

3072:ZhOm2sI93UufdC67ciEu0P5axvqdUmdznCvs7BuRoYFBg/gXVqPfSoi0yG24e9zG:Zcm7ImGddXEu0ucju6/4kf724l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5e5cd4ad7911f1b35864e61bfcf98130.exe

Files

NEAS.5e5cd4ad7911f1b35864e61bfcf98130.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.rsrc
Size: 40KB - Virtual size: 152KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ