NEAS[.]91962708f12c2f8b8b8df311c4dd6fa0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.91962708f12c2f8b8b8df311c4dd6fa0.exe
Size

484KB
MD5

91962708f12c2f8b8b8df311c4dd6fa0
SHA1

7718d2466d69a4b8964e0c59d3f3eb908c3a9886
SHA256

95dc0ff6a1dc14373b4d1995493f8607254f9917f4d230017758899748ee903f
SHA512

b068e81b0a77458b9535b7f0379e4698fa7c307c8d00f4688ae594a361f839b8596759ade3dd1a74cc19a6be900ceae2325145671590b5e13d01b327a0a5541a
SSDEEP

12288:jLPkCDt1EG2XVekhdeTA85h7vBRc7XVettCdF:jLPkQ1bqAFb7vXcBeYF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.91962708f12c2f8b8b8df311c4dd6fa0.exe

Files

NEAS.91962708f12c2f8b8b8df311c4dd6fa0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.l2
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ