NEAS[.]a639618da389b009fc1aba5b4abba820[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a639618da389b009fc1aba5b4abba820.exe
Size

678KB
MD5

a639618da389b009fc1aba5b4abba820
SHA1

5911228bcabebaf5b41fc94e2ce1adffbb3b1d7a
SHA256

8d655ae9116f2cc17b3948eea8b8b4fad46d35e5894c2964bde65bdaabf961e5
SHA512

f56a8c9de64b6bddd857e1afcec4c23fb021af849eb9fb0011044d9682df4468d37e73e31865cc6cf48441f1d1b60aa6e5ab243eb5c69613bdbc7b679d074e11
SSDEEP

12288:qA9Plphw3MHzsA38geGJmVH0pD7mtoCVU13AK6dLG5Mz0Fq6PZGP:/9tp+3nMU36l3AKAafFq6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a639618da389b009fc1aba5b4abba820.exe

Files

NEAS.a639618da389b009fc1aba5b4abba820.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 643KB - Virtual size: 644KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 27KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ