NEAS[.]95f5a7baf808b77ae89150f926ef4640[.]exe | Triage

Sharing

General

Target

NEAS.95f5a7baf808b77ae89150f926ef4640.exe
Size

2.3MB
MD5

95f5a7baf808b77ae89150f926ef4640
SHA1

9b0ac5d58269a40d85f6b7e8e60fbef92e2b3003
SHA256

8903660b137677b188a98c65c9caa14ed2c2a5ea514f599f1c6fc6d11f732ad9
SHA512

ee1d596e8c7dcbd080a7df87c6b122fd1414a9a7980b403a370db8b23d9dd459cb49ce0956d3459ddc2e3585b8c654dab553b8e24b4feda772f933b5d26762a9
SSDEEP

24576:86V6VC/AyqGizWCaFqyRl11tmlNQ2OnBdFQtP51llPup33kT:86cbGizWCaFqy11tmlNQ2ayVup3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.95f5a7baf808b77ae89150f926ef4640.exe

Files

NEAS.95f5a7baf808b77ae89150f926ef4640.exe
.exe windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 278KB - Virtual size: 277KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 173KB - Virtual size: 172KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.2MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE