NEAS[.]34fa1038f933d73d0e00ed31575e4980[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.34fa1038f933d73d0e00ed31575e4980.exe
Size

244KB
MD5

34fa1038f933d73d0e00ed31575e4980
SHA1

a84c215f8c003b398311ae4c6181b9d3890079f8
SHA256

519b49e36c951d308ffcccecb971233bc38ab23a24f97bfc7bac8b6c7355316e
SHA512

7bda4b58b90ab2a70e785bfea7623a53aeaf65856fd893e36bd9f75f88ea736927e51538b4bce490674acf1d2bc810695aae7bda2994f9b19c02ac2383546967
SSDEEP

3072:a2r1nCKfxnWtTPDupSW4zljEIFEup0qXpywj9lWMKXYMCTbmLuhzAaQYfnwC0s2t:a2rPB6PDupP4zNEa1XaMKoMsmyArCxa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.34fa1038f933d73d0e00ed31575e4980.exe

Files

NEAS.34fa1038f933d73d0e00ed31575e4980.exe
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.c2r
Size: 512B - Virtual size: 240B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 219KB - Virtual size: 220KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ