NEAS[.]ef5407ac813f1de2405f95c16a62df20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ef5407ac813f1de2405f95c16a62df20.exe
Size

4.1MB
MD5

ef5407ac813f1de2405f95c16a62df20
SHA1

e3c53bc22120ac5228252fd05fd214603bc6dee6
SHA256

99dae833c5bc7dcf4e2275678660698f522d6be1ccf5822a8894cbd5a8b58b66
SHA512

2fca8c596524cd0de392fe30325fca18ad85e03b75dc88cd8843b94f0742d5b45980da404228376153ce1fe35877d2e13c647cc4140658f56a4d20e7d26a27fa
SSDEEP

98304:gYk4QB/tZc/1Vc1ZfCUlmQwRyxQrQ38jEi1uQDgJai6WlrHhkG2E:Rh3aaSQRT88jIJG4hB2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ef5407ac813f1de2405f95c16a62df20.exe

Files

NEAS.ef5407ac813f1de2405f95c16a62df20.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 730KB - Virtual size: 729KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 78KB - Virtual size: 344KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 107KB - Virtual size: 106KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.giats
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 222KB - Virtual size: 221KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ