NEAS[.]d20096c94d2e39eaf286e44b50dbae10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d20096c94d2e39eaf286e44b50dbae10.exe
Size

117KB
MD5

d20096c94d2e39eaf286e44b50dbae10
SHA1

af0614517d4379eb1b3ce85b3747dd9a1081584d
SHA256

aa59b8f7b1fe02cdfd354acd425d521e7fea4a9dc838751e04b96e315fb29321
SHA512

e519eca98af59edefbdbeff2edbbc40473cee2a33345d3f2afbe1e4e79a926de61f4c63f5995729e292334185d48813375f59e1964d0551d07af85629bac0896
SSDEEP

1536:3VYG1VH1i2iE+hSUFdMMs/mBP6iytTkKIB:31h1i2iBrFdMMs1tcB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d20096c94d2e39eaf286e44b50dbae10.exe

Files

NEAS.d20096c94d2e39eaf286e44b50dbae10.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 18KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE