NEAS[.]5a8037c129da9d97b73cfb99a1efdf60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5a8037c129da9d97b73cfb99a1efdf60.exe
Size

100KB
MD5

5a8037c129da9d97b73cfb99a1efdf60
SHA1

e540bd202e38444d4d4ceda30df30bef9e1d5181
SHA256

a666874f9fabf06f29407e1ecc71f1c1040d33bfed674f8f96d00140fd755d7d
SHA512

35616efdc3ceb27c3fdd9949d34e024142fbca3783c56bcbf6014ae3a70b872b34c7008951e627b4bb319bbbb7ba210e5d5b711d5dd029be23d92047e797e4ed
SSDEEP

3072:klXxgtyWbxgXXVJ+vVNjeqssiUW6VByx/CG:k/qy1VMjjGss6VVG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5a8037c129da9d97b73cfb99a1efdf60.exe

Files

NEAS.5a8037c129da9d97b73cfb99a1efdf60.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

dUKSqJnb
Size: - Virtual size: 100KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

NUdqtLqT
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE