NEAS[.]989a36958f523f7f0304ee47c31e54d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.989a36958f523f7f0304ee47c31e54d0.exe
Size

4.3MB
MD5

989a36958f523f7f0304ee47c31e54d0
SHA1

0aee8ab8a43f1fb1e3bb13fa0b836e5b1d0a6c89
SHA256

e770f8011af10432ac8e7b1a729a055cc707162e1b767d625f71cef82d08be2f
SHA512

0b39c6fb701c2ed6ad6bc1241011179caf6487977458c6c5044f9193092f1c02aee263793ba1db818deb9cd7925ce331291356cce5921fc3c68c2fe2c17c276d
SSDEEP

49152:U6TuLm1n1Mtq3c+8zosvdQRDuxtQndWWpxDYGvURbdXWXWpG:U6Vn13PsFjGvUpG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.989a36958f523f7f0304ee47c31e54d0.exe

Files

NEAS.989a36958f523f7f0304ee47c31e54d0.exe
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 598KB - Virtual size: 597KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 106KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ