NEAS[.]1452be8c1330b76779e34363d106abb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1452be8c1330b76779e34363d106abb0.exe
Size

412KB
MD5

1452be8c1330b76779e34363d106abb0
SHA1

342e3d94b9ec1ef82c9b2ff03f978a497dec32f4
SHA256

6fcb4cba2f08d9ae8cde3b4332aa43266c43ed68929afa5d49db5d904bee0c00
SHA512

091f139f54e09529d54ebc29c668a6c2572b2b94b8b945f65e611b7d6804132f3c7a0076bddb137d97932ceb627fd893d6b0d6b358e7c6f359528ec4a4946705
SSDEEP

6144:6DbwexBO7F75aT+QwksRk6S7NqbGHzux51iCBm9APyULGu:64eW71wT+QULSJqim1iCeCGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1452be8c1330b76779e34363d106abb0.exe

Files

NEAS.1452be8c1330b76779e34363d106abb0.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 308KB - Virtual size: 304KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ