NEAS[.]8d1241f098abecfbe2dfad2f50bc9570[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8d1241f098abecfbe2dfad2f50bc9570.exe
Size

364KB
MD5

8d1241f098abecfbe2dfad2f50bc9570
SHA1

2d3e9fc83a6a703f871d8dd4b335f5f29eeaa599
SHA256

73688dc3294b757435c3e968fd5165296439a7cda21064f75fd4a44aa90f5f5e
SHA512

2c49e80fe35eacdd6d10bf7573f3118eb6ea8f05f381fae894ab82b61af0faf4b14877576c99e3ddda6adcf6f729dfe556cc7284fc6fc0d4002934b4269a3090
SSDEEP

3072:9VMfMIbIyw3J9S/s8kZUBqOHHlxFT36bZohhvW18qgplL+BC3K5eqU+BC3K5eqYP:4fMmcQ/stuqsHbFz6behUM5K70K7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8d1241f098abecfbe2dfad2f50bc9570.exe

Files

NEAS.8d1241f098abecfbe2dfad2f50bc9570.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 89KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ