NEAS[.]c8f01994113081852897118afb08bd00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c8f01994113081852897118afb08bd00.exe
Size

3.4MB
MD5

c8f01994113081852897118afb08bd00
SHA1

71744fb66ad705413cbcacc6de520083dbce9dda
SHA256

218b5ce6035d3ce02fc255786f71829d321f1d45a37266901190afa2bcc5e6f4
SHA512

094a8b2be61b58862a30eb2a8e133ddb0180df9205ffea0ad7d44fcad170c99d47a72337780dc36ff4cc44283ac1481d167daf84258f9b0dfed503c207d86076
SSDEEP

49152:KTYzGDiL2tkCD4T9iYz8vJK5c5d9w2YSOIgcv7gUv+mjXcr4:GDiatsTz8v4GraJvczDXf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c8f01994113081852897118afb08bd00.exe

Files

NEAS.c8f01994113081852897118afb08bd00.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

z�'�
Size: - Virtual size: 2.8MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

z��
Size: 3.3MB - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.XZ��?
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE