NEAS[.]5b6fff33e9686e21a49ede88d2b4a500[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5b6fff33e9686e21a49ede88d2b4a500.exe
Size

432KB
MD5

5b6fff33e9686e21a49ede88d2b4a500
SHA1

562cfa8df372e1f2a5fdf6e20412527b98826cc1
SHA256

e9593052fe3b7a955b442fee680ea37e78f2e313026c38864e3b5aed5356b53d
SHA512

06c18f9c4b3651e6ae12ad81dab822119a9e95c642660bac087fd7fb37107639edf9119cceb79083e0f3639a43e7e8b922cc2074bb8c05483c9796954c575600
SSDEEP

3072:A7vHbtw1RvjxCb5NgXDY7uSK4aqTBAS/tPgmQ+DgmQD:si/KgzeYqTumQvmQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5b6fff33e9686e21a49ede88d2b4a500.exe

Files

NEAS.5b6fff33e9686e21a49ede88d2b4a500.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 192KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ