NEAS[.]8e4b747d31582599bc9058852faae610[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8e4b747d31582599bc9058852faae610.exe
Size

124KB
MD5

8e4b747d31582599bc9058852faae610
SHA1

8920f40750c6bb7b2e35e663f19dcdd5e4f4b792
SHA256

6cbde33dadbf3ddf70a394045f5d52d9f905edae52e7f5eb266dc06e948c983c
SHA512

d916de9ba3b9486c8c0af7cdba528819525e266c8fef8a3fa8629825d1f7c70325b0d18a7dfe10e385482eafb4165de205115a75dc5e57b37bf60c093471fecb
SSDEEP

1536:2gf0ceGBDbWZqZWXLX2jzILxr4/9iLpZWqeJAbzRZICrWaGZh7i:2gcceoWt7XMQQiLpZWTAxJrWNZI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8e4b747d31582599bc9058852faae610.exe

Files

NEAS.8e4b747d31582599bc9058852faae610.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE