NEAS[.]a5ac392e130730bbfb62c8d0868f8770[.]exe | Triage

Sharing

General

Target

NEAS.a5ac392e130730bbfb62c8d0868f8770.exe
Size

88KB
MD5

a5ac392e130730bbfb62c8d0868f8770
SHA1

9019080032085fee64bc0f3ea6ec3d9253b4ae1e
SHA256

49e69082d3ef67c1a21299c74ef769fa74a52e15a0efa5c5d58682b4d434c661
SHA512

0d3cf5d5e6cad90b3a71d68a7131d196df61551fcd34ae0855a72a10826fa74f8185c3ec5bc97b48756895e6d282208b2fa8f6997197ee54f8c2935febd11391
SSDEEP

1536:ICHLqsQMOZRfXj4Nw2chaTfWLqhCZb5Rq/:ICHLz0f0ahLrZb54

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a5ac392e130730bbfb62c8d0868f8770.exe

Files

NEAS.a5ac392e130730bbfb62c8d0868f8770.exe
.dll windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ