NEAS[.]a82dde5fa2248920f9b68d12768bbc60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a82dde5fa2248920f9b68d12768bbc60.exe
Size

280KB
MD5

a82dde5fa2248920f9b68d12768bbc60
SHA1

2e58f125d6c9af27e61261d6cc6d9905605d3103
SHA256

33ca1fcbf45032a7fef9046bc8aa97765b73379d5899fae078f33fa40fdf8d59
SHA512

37499634f2319f4a9ec037fa9047557acb0300fbe050802e19818330d482fedd6b3e7f0a1d412b892e1824586543eb03a07e65f93d0b1a287d659b3e67a0272f
SSDEEP

3072:f4B0Q8L3gPAiclEOQikkDOF7XttYQTuNz+3pO8+s2bU5d+BQMCgqfAykd4MskmUU:Y0H0AFQl7XtRTf36H5ytzpYlY0KN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a82dde5fa2248920f9b68d12768bbc60.exe

Files

NEAS.a82dde5fa2248920f9b68d12768bbc60.exe
.exe windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 692KB - Virtual size: 692KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ