NEAS[.]c0b9aee767b88bf1fb445f845e38d850[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c0b9aee767b88bf1fb445f845e38d850.exe
Size

375KB
MD5

c0b9aee767b88bf1fb445f845e38d850
SHA1

eb02ad0400748dbfbf6c1d60e0e4e06381dc486a
SHA256

fab65aae332a854a8691f99399d83b8cc210f782df9b154f58abf27a7ce65fe2
SHA512

e22345a8d3e3d39d2a6c4b78be6f90139628668b083f6a038eee415fb533430d4fabdb9987f9cb9e111d790d011dccee0bc282efd489bb58d10f5f2d8d3d17cb
SSDEEP

3072:u6jchyinW3kBlqSpi9GXgS9uaxjnw89JnszQcJdXy:Nin4kBs6i9GXgUxF52dXy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c0b9aee767b88bf1fb445f845e38d850.exe

Files

NEAS.c0b9aee767b88bf1fb445f845e38d850.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS
Size: 360KB - Virtual size: 360KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 2KB

.l2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ