NEAS[.]40222a4ca407dd429efdd39425bf63e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.40222a4ca407dd429efdd39425bf63e0.exe
Size

679KB
MD5

40222a4ca407dd429efdd39425bf63e0
SHA1

fdea91631021cfe75ea930955030831429b5a461
SHA256

4f014fccf4d8a1860aac0af9af962a2db92da82813da8351b2f4e83e7bca5573
SHA512

2fae148920cb4ff67aea33f8ab49d1a4033c59e8249d616a8cc1d93209a41ad607e479bc6ea3c3b290384a0d785200441ac5a870596b9ad82f41f5663b2f89e5
SSDEEP

12288:q6rSHtiqzJgs+Vvu7x9Ckdzqw6ST/umGWIGDwQuWvtSQpgQ:25zJeveDTcWIGh9tSogQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.40222a4ca407dd429efdd39425bf63e0.exe

Files

NEAS.40222a4ca407dd429efdd39425bf63e0.exe
.dll windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 238KB - Virtual size: 238KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ