NEAS[.]df89935130c38bac959e9415559c1450[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.df89935130c38bac959e9415559c1450.exe
Size

115KB
MD5

df89935130c38bac959e9415559c1450
SHA1

06f27a9685220d7178a0e17d8f1d0fe4e5f71242
SHA256

4be0568ed063effeb9113495611ae2b3890532470d99e5a71359a8de6a1372c6
SHA512

377d8994301f1db937278c71ea76168af7fdd7e4488be882600d3211a44376250b2216d4db12b4dbdf56aa9415aae6382f37bc99b84ab27ca6eca81bef2d38a9
SSDEEP

1536:e1awvPzbPx/r/rDsiutpW+IjGXDsQ2y8MXMs4t8F1o5Tz+2E6DwNqNbOcwhB4N9U:6awDrjsnIis283DeF1M+2KY9DEAOwTM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.df89935130c38bac959e9415559c1450.exe

Files

NEAS.df89935130c38bac959e9415559c1450.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data1
Size: 512B - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE