NEAS[.]37796e2226aaddb88488daba6fcd0a10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.37796e2226aaddb88488daba6fcd0a10.exe
Size

36KB
MD5

37796e2226aaddb88488daba6fcd0a10
SHA1

18e217df5f558de53d679bbcf67555f64f71dc72
SHA256

9163369dcfe03b28a797d1bc8fe855b5436f8223af6363bc8abab2860069bc4a
SHA512

867ee7f68a52a2420ac2d79dbbb834fee7d3ff0ab870bb1773cd83a8f8d0e43e98536a13a769e746fb44256c84aa39fe1be7dfa34cbfc726adbfaddb5ec81965
SSDEEP

384:EytB/RMrZ3ZdLKP5gF3i8Ny5QgDDfGaP2M0zNY4iEuhytlmINTPnJwK:DBpQ3HC503i8NyqJaPT0zNYA92INZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.37796e2226aaddb88488daba6fcd0a10.exe

Files

NEAS.37796e2226aaddb88488daba6fcd0a10.exe
.dll windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 951B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 128KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ