NEAS[.]45c98664d9925da7662f663106efb990[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.45c98664d9925da7662f663106efb990.exe
Size

244KB
MD5

45c98664d9925da7662f663106efb990
SHA1

7743f59fb17ed4eae1f81fc7cfee79a47323d600
SHA256

0f55180d125a26cdf5607aa5bba77caa4db5939800c2631c02624a7ae8bf98a4
SHA512

6498b4fe1fb8189cbfd2b72396c86c78db30e59dbbdb5074c85c68f4afc4b5c5ee2a85771df1a00f05109f9de4315acd992c71272f65b60a6110cac87e20cea4
SSDEEP

6144:bMJ7Ql7ADyVL0/InyhSlUdo+DwNsA5MSD4jW:b67QODtIrwQ5OW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.45c98664d9925da7662f663106efb990.exe

Files

NEAS.45c98664d9925da7662f663106efb990.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 237KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE