NEAS[.]3cbc9273e8a4b12cba1647058d6fdf20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3cbc9273e8a4b12cba1647058d6fdf20.exe
Size

379KB
MD5

3cbc9273e8a4b12cba1647058d6fdf20
SHA1

47e9f86e3ec40f187bd01fc3a863bbfa25922c37
SHA256

41ad2e257458305d04cbeaeac0f81d14f8e69243169dbd274ef737ea96aa3a8c
SHA512

dfa0e8c8e81f47d73bc877bc1887d6fffb4f4c8ebd634e39c9374b671f995539764ec754a75223fc770970ec4f7992df2374cf611f74cd6358ddb0d27b2be736
SSDEEP

6144:4+7WwBk2toa5uvE/1OZ8M+ydv+qaCtqWmAWTei+90mE/Q1qk:xFBCacFSMpv+qagqWmAWTj+IQ0k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3cbc9273e8a4b12cba1647058d6fdf20.exe

Files

NEAS.3cbc9273e8a4b12cba1647058d6fdf20.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.enigma1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 244KB - Virtual size: 244KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE