NEAS[.]22a2569dc06a2e0e0cc8c0b62bf28b60[.]exe | Triage

Sharing

General

Target

NEAS.22a2569dc06a2e0e0cc8c0b62bf28b60.exe
Size

395KB
MD5

22a2569dc06a2e0e0cc8c0b62bf28b60
SHA1

b7879204bd893c645db66fb57acc6b82fcc85296
SHA256

400b74b8a4d64e1de3999005920abcb5eb557875d8b1618ea65765d8ca148804
SHA512

019b8bc2ae0ac48bc4b0df32ccf95402f27c6768456854c45ba370496a7779b21a0a64b0f8940ab54b9da823cfaa772477b2c2fc9caaf83269a3a8adb1bb2252
SSDEEP

12288:EKGpCmLob1bMJR3PIGLxe0DypWQmLoajeYgE:EBEQJR3PXx7DWULEPE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.22a2569dc06a2e0e0cc8c0b62bf28b60.exe

Files

NEAS.22a2569dc06a2e0e0cc8c0b62bf28b60.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 336KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 383KB - Virtual size: 384KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 778B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ