NEAS[.]89a665296c062cf28273c25e7b156390[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.89a665296c062cf28273c25e7b156390.exe
Size

475KB
MD5

89a665296c062cf28273c25e7b156390
SHA1

d722e1c26bd75bb2d382e508163fbb48a2a33d45
SHA256

58834a22fa064ad510a09264ecd37df8a0b9a31687a37c600e19e6dd676d6c40
SHA512

5111d615e57bae9017de776dfee70fe4130bbb768927c034dd114a6445e56d329a2737d51bd3661123ae9444286e9fe0f445ee7152923ea486a767c44429efd8
SSDEEP

6144:ZK0gX7niHXTEbkSmZI3zQ4XGpqMemRk9ovROMJq:KWgSI3zFXGRROM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.89a665296c062cf28273c25e7b156390.exe

Files

NEAS.89a665296c062cf28273c25e7b156390.exe
.dll windows:5 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.data
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ