NEAS[.]5aa540044d7895504b9be914caf9c250[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5aa540044d7895504b9be914caf9c250.exe
Size

233KB
MD5

5aa540044d7895504b9be914caf9c250
SHA1

6e05970900d54b3cdb1022fd7f0bc20795055b12
SHA256

28a2630390c4789a3df411646396232b4efd66aa105f293008eac6a51f44dd10
SHA512

89121a2f7ecb2d3ec1b4bb080d12b5494b18e893eed2f57803bdb9f0dfaa0dbaaa1808d88eedf22722279e0ae2da90e57172317b388c896eadc56143b96a3320
SSDEEP

1536:MEsyxft5/xfDEsyxft5/xfDEsyxft5/xf2xfDEsyxft5Cbl:MEsm15p7Esm15p7Esm15p67Esm15Cbl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5aa540044d7895504b9be914caf9c250.exe

Files

NEAS.5aa540044d7895504b9be914caf9c250.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE