NEAS[.]f53b925aa0a68a62f321d2fc82081e10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f53b925aa0a68a62f321d2fc82081e10.exe
Size

281KB
MD5

f53b925aa0a68a62f321d2fc82081e10
SHA1

acaac2577dbcd8918ea8fcff1b53bc8f38b852c5
SHA256

546440561f9dcc6b81caf8fad2da0e32c3afdbe2f662593aa3bb96c48fccce6b
SHA512

fb8d1ac19172f03609a86c8008571d39fe8569bb1d77b606445b9ea30e377df23e858c7bc208c821cd145fecaf8a36f8a343ca200fbdd1e682b3b29e9efc39fa
SSDEEP

3072:sw4B0Q8L3gPAiclEOQikkDOF7XttYQTuNz+3pO8+s2bU5d+BQMCgqfAykd4Mskm5:sX0H0AFQl7XtRTf36H5ytzpYlY0KN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f53b925aa0a68a62f321d2fc82081e10.exe

Files

NEAS.f53b925aa0a68a62f321d2fc82081e10.exe
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 503KB - Virtual size: 503KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 149KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 242KB - Virtual size: 241KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ