NEAS[.]3f35d3e985ab5be79411b08490b51610[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3f35d3e985ab5be79411b08490b51610.exe
Size

26KB
MD5

3f35d3e985ab5be79411b08490b51610
SHA1

f2df667949a464994b3f069ed77a800e405a796c
SHA256

0bb5a6921df7384efdf92f51a10898542bfdc105da15c01ed75f7669d40a3ea4
SHA512

26e360d61912c280ae2e79fdb19a9eba0226c7d5a2219a4078e1403c9b241fa2340e7a2b541f41926871b17b7341d50c9930e7ddd60c78284726588c935309bb
SSDEEP

192:EjJuh0YJuh0R686AIpJIppxrqzZIBIAJciJcfHOPQl5HOPQl60T9bjMM0T9bjMW:EVuRuWIDIprqFm4mR0h3MM0h3MW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3f35d3e985ab5be79411b08490b51610.exe

Files

NEAS.3f35d3e985ab5be79411b08490b51610.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ