NEAS[.]893ac4942d5a0e47dbc8b07361a0a2b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.893ac4942d5a0e47dbc8b07361a0a2b0.exe
Size

459KB
MD5

893ac4942d5a0e47dbc8b07361a0a2b0
SHA1

8a0074baf48187ac3e48bb04f7fe1af8f53aa38e
SHA256

663cff77c188b370ff0533fc721c7eec92d3cac71eec19b8a040932f657f0e6e
SHA512

a9d6f9bbd43ea3f16d4227cfc10ce3336f031017e998401f93173d6f62037047575b77322301fddcee5735f707fa42ef53057679c97ad928c6e7229575babf8f
SSDEEP

6144:FY+32WWluqvHpVmXWEjFJRWci+WUd20rUU5EYCTvaBju4zi:SnWwvHpVmXpjJIUd2cUusvalxzi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.893ac4942d5a0e47dbc8b07361a0a2b0.exe

Files

NEAS.893ac4942d5a0e47dbc8b07361a0a2b0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 436KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pb
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE