NEAS[.]aa961c6c0577cced4de4a7ccab81a900[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.aa961c6c0577cced4de4a7ccab81a900.exe
Size

438KB
MD5

aa961c6c0577cced4de4a7ccab81a900
SHA1

568c342546ee5a1cafa6e3732a2579857bd034e8
SHA256

a3976fb7ef6697bb60a69741f4b0c9fd136f472d4f7b4ecb56c26c594fa38162
SHA512

922973eb332511d4724cb99d62450077d8954aac124a6ca8dcc0ef261b48b81f9a4308634bb23204737ac3eeb9daf213fdcea32874521a13c559cb9f03bcfe20
SSDEEP

6144:QtGA/XcC2ne/H1IxSkxhRMhhAD4sxG4oG3Km0CqeSYH6BMgBiIhnIN+v0OqGDqT3:q7/Xrke/H1IKf4tFqeJa3hIAv0qDqD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.aa961c6c0577cced4de4a7ccab81a900.exe

Files

NEAS.aa961c6c0577cced4de4a7ccab81a900.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.d5f0
Size: - Virtual size: 560KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.d5f1
Size: - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

df78g
Size: 383KB - Virtual size: 384KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

df78g
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

df78g
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ