NEAS[.]33dafe8c219bb425313825350aeaeed0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.33dafe8c219bb425313825350aeaeed0.exe
Size

3.6MB
MD5

33dafe8c219bb425313825350aeaeed0
SHA1

b5c69135739b34cdb5c29d82eb2cb6131232f420
SHA256

38757fb3f5d02a2418a4d22f1d30b009d239d6c558801b4e4850c92665221659
SHA512

b5d82accd5e3d03547f8c30d3fdbde4e5e94c7d7dcfa21b3e4ea854a20e15aa67e6b25e1c427540db28e5e7936d7ea27cd772c6d265cd6818838dfba6a1945c4
SSDEEP

98304:5RSri0D0chbr84n6KzRMlg4b5jBXh6rRFO9U:5RCi0rZ84n6Kf+5jhhu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.33dafe8c219bb425313825350aeaeed0.exe

Files

NEAS.33dafe8c219bb425313825350aeaeed0.exe
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_DLL

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.trcode
Size: 1024B - Virtual size: 555B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 784KB - Virtual size: 783KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 198KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trstr
Size: 512B - Virtual size: 445B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ