NEAS[.]d4e9a1aafe6ef45a03799ec0422a4bc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d4e9a1aafe6ef45a03799ec0422a4bc0.exe
Size

677KB
MD5

d4e9a1aafe6ef45a03799ec0422a4bc0
SHA1

ea4bb154c9f6c2f964336c9288b8aef5576e178a
SHA256

b640c593e51db5b42e6715e4b5d4a7210e957e58a90b691de7a07fd6a4b384ad
SHA512

5b61ef27b0d93cea44471ad16cf6e283236127237c357ec861d4032209e1d08ae42c7c4c2704e63c6c9ba7e5a5e5fb3e5f404a7b4b3f43323035ff77804608b3
SSDEEP

12288:yFAqsL7nTcbrmD2U84ZF0Lg/DRZhf0deU/N9M+ugdM4WC6wK3Mu2tu5Ilq3s:CAqmTImDtaLg/DRZhf0deU/N9M+ugdMI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d4e9a1aafe6ef45a03799ec0422a4bc0.exe

Files

NEAS.d4e9a1aafe6ef45a03799ec0422a4bc0.exe
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 567KB - Virtual size: 566KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 460B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ