NEAS[.]e9edf87420d10b35977efeb520eb2e50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e9edf87420d10b35977efeb520eb2e50.exe
Size

76KB
MD5

e9edf87420d10b35977efeb520eb2e50
SHA1

1de492c34795f31ac0aa4188185f91cf7e91d143
SHA256

3d696d546df663faaf17cf28162b1b3fb41c0aae9a2f1ac45568db936caa5daf
SHA512

8047cc745af2a6922b868b1442f393f7965979e4b7e100cfbbdd4ddc6bffd179b908e58b58769495c71f896add25e92c852ce7e4e0705ed4df2f1e2aa695f1d8
SSDEEP

768:cPnZnY7BlphA7pARFbhEIjI5Q5fmMUoj2xA/+bX1vqX1vzPnZnG:cPZY7ZhA7pAp6QNmMUot/+GPZG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e9edf87420d10b35977efeb520eb2e50.exe

Files

NEAS.e9edf87420d10b35977efeb520eb2e50.exe
.exe windows:10 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 64KB - Virtual size: 62KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ