NEAS[.]86e78db904f0b6d699ac4ea9260cdd20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.86e78db904f0b6d699ac4ea9260cdd20.exe
Size

888KB
MD5

86e78db904f0b6d699ac4ea9260cdd20
SHA1

f2e8b8fd6a6b64dbc50f0ec09e3dce7b1a73c416
SHA256

fe9643e759ef255a42c36440c743af380cd87e70d877566089d5ac143b059f6f
SHA512

301209284f73fae3fa311e87f1e60333f9a21b9c662281a3f084cee9308e8c7b2de65a6b5c187db0abc5b8c381dc8cb638ada8d50f4978115df40396c9c55c7a
SSDEEP

1536:MdDez8LqSWeIOi0lF0fUSsMt0AT93DolcllcS4HdGmy1z/VcRfIOGZPzjvyCK9v3:Mdq/g4Ga0QolBSKdsLVKiWXUDVoCJpE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.86e78db904f0b6d699ac4ea9260cdd20.exe

Files

NEAS.86e78db904f0b6d699ac4ea9260cdd20.exe
.exe windows:10 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ