NEAS[.]5b2bd226e8542f48e3f99b13e0a7b490[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5b2bd226e8542f48e3f99b13e0a7b490.exe
Size

757KB
MD5

5b2bd226e8542f48e3f99b13e0a7b490
SHA1

445d5cadedf64f106b2d69639ede72b485f37896
SHA256

b4a0800f4a03191641ef1aef6622f42ee3253ca0a32d064c03a1ab4cf1998a7f
SHA512

4b9d39ab78da3bdf1aa4c9f331c588c8ea00b4d1dd5d152dd4b1456eeb51660afdf6b05774b9d61f0c0dee63c43d73e2ec4005c4143024169c5e783bddd6c439
SSDEEP

12288:5FR+sNMnUXLlAo3wFsDmS0lnizVNgbznaGmQ5omndo3Mzp0A:5WlKLESMrrmQ5oUdo3KiA

Score

1^/10

Malware Config

Signatures

Files

NEAS.5b2bd226e8542f48e3f99b13e0a7b490.exe
.exe windows:4 windows x64

Code Sign

59:3e:27:f0:ff:14:ea:08:e4:46:a8:e4:65:b6:a6:09:fe:bf:c9:88
Certificate

Issuer

CN=Discord,OU=Discord,O=Discord,L=Washington,ST=Washington,C=US,1.2.840.113549.1.9.1=#0c13737570706f727440646973636f72642e636f6d

Not Before

08/10/2023, 19:45

Not After

07/10/2024, 19:45

Subject

CN=Discord,OU=Discord,O=Discord,L=Washington,ST=Washington,C=US,1.2.840.113549.1.9.1=#0c13737570706f727440646973636f72642e636f6d

90:d1:d7:82:f0:e0:6c:9d:6a:09:83:70:0c:9a:4d:ce:3b:cf:54:b6:f3:4c:59:25:db:1a:5d:03:e2:4f:df:fe
Signer

Actual PE Digest

90:d1:d7:82:f0:e0:6c:9d:6a:09:83:70:0c:9a:4d:ce:3b:cf:54:b6:f3:4c:59:25:db:1a:5d:03:e2:4f:df:fe

Digest Algorithm

sha256

PE Digest Matches

true

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 753KB - Virtual size: 753KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ