NEAS[.]b654ce96eb87687c1e441796439b52f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b654ce96eb87687c1e441796439b52f0.exe
Size

423KB
MD5

b654ce96eb87687c1e441796439b52f0
SHA1

5ee67b86cf1bf7fea4404b4c9a1f0c5eb339a808
SHA256

6fcaac37fbc1b90d74e9d407b1dee0eaa7cb63a8e9f03b9f25c16674ca0cb74c
SHA512

098058f4f8471b0f35465aefeb556701d970d4748adaf6078d45662e9eca3bc9bd8367e7f9ef316ecb62b1b29cfbd486b38c24920773944aca5f1d149f15722a
SSDEEP

6144:dWxlKgzelZNQSBQGH/CSpWqTJNs6+X7jINs6+X7j:ddfBQGH6SfU6+X/l6+X/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b654ce96eb87687c1e441796439b52f0.exe

Files

NEAS.b654ce96eb87687c1e441796439b52f0.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 236KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE