NEAS[.]8e5a79ebca42afba1435da8c09d68c60[.]exe | Triage

Sharing

General

Target

NEAS.8e5a79ebca42afba1435da8c09d68c60.exe
Size

464KB
MD5

8e5a79ebca42afba1435da8c09d68c60
SHA1

ab4752b9b9b4cbc61745ef977da5d7a8f292ce9e
SHA256

1a57a6255e4296a9c19350e591dfe614b58ac8332156a5d5771aeb478c64e5db
SHA512

9b6cf459ab60a782557a35de2600ead5f3d5ec949c51b6f27e153a343f435a95f09252de45cbc14fb170fdcbdadae45da4d6573e9540b8947ec259e4d0235f66
SSDEEP

12288:DWlc87eqqV5e+wBV6O+ypunWt0AiDwju4zwPC:DWSqqHeVBxZpuW+Mhzt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8e5a79ebca42afba1435da8c09d68c60.exe

Files

NEAS.8e5a79ebca42afba1435da8c09d68c60.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ