NEAS[.]dd44f1a279e627b292990483ff3b3ed0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dd44f1a279e627b292990483ff3b3ed0.exe
Size

380KB
MD5

dd44f1a279e627b292990483ff3b3ed0
SHA1

46dfccde24786962084ae2a30cb6dc8b59f5cb8d
SHA256

1a1c7f60758fc7fbf1f5d7bffae29b0b4e8b753c8c02b7cb009933308cc055e8
SHA512

f37b83a019afb11cee04ce690fdac3afcd045b37612677da0ab4467060e916ed2c17f1075c9897dafce569d4c074749ec03186e6e8c888d265856a87eecdf103
SSDEEP

3072:M+Oa8AFGMsZI5e+w8lq+BC3K5eqU+BC3K5eqYro:DIAFGxI+DK70K7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dd44f1a279e627b292990483ff3b3ed0.exe

Files

NEAS.dd44f1a279e627b292990483ff3b3ed0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ