NEAS[.]3bfd4e5ecbdfda45a97b1ade160788c0[.]exe | Triage

Sharing

General

Target

NEAS.3bfd4e5ecbdfda45a97b1ade160788c0.exe
Size

384KB
MD5

3bfd4e5ecbdfda45a97b1ade160788c0
SHA1

40b0e9eb6fb7cd25c7d13d1e278839a9d9d068b5
SHA256

0d5be26b14962d7b891945a853410ebab887464961dbe7b16bec9976c8304234
SHA512

d7787d71035cdbde51ccdfc1b596c46d76fb293e35498f0d1c401349f70023efdf3b1be3244c0b9ab9ff022c18b72b69751a511df03c7c9286ce244e7bea61d6
SSDEEP

3072:wVMfMIbIyw3J9pLOrdzl7+BC3K5eqU+BC3K5eqYroGQ:9fMmcbWdzK70K7V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3bfd4e5ecbdfda45a97b1ade160788c0.exe

Files

NEAS.3bfd4e5ecbdfda45a97b1ade160788c0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ