NEAS[.]42e5366901c4198c1b6d09720838e090[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.42e5366901c4198c1b6d09720838e090.exe
Size

230KB
MD5

42e5366901c4198c1b6d09720838e090
SHA1

eaf1635a923ffeaed99933cabe6a39c877d6ba87
SHA256

ebba688c6e96ab822bfaabf9694394c6a2af7839db4abbcd315320d33a2ccb3e
SHA512

ecbef43c38306c51f0101e25359589efef29d06fa03887c576e091c51518ae55b3ae0ae95230931754d33f08e745e0e727870d35e2fe96769efb105e62d0b57b
SSDEEP

6144:rgOT4GqAiEnnnkgo6H+7dZbWZheI48hZJNulG:MOT3f5H+7dZKOI4Mdus

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.42e5366901c4198c1b6d09720838e090.exe

Files

NEAS.42e5366901c4198c1b6d09720838e090.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

Size: 52KB - Virtual size: 878KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 160KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 10KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE