NEAS[.]4dfd78f6afadd50ce0b409d4ed9a9380[.]exe | Triage

Sharing

General

Target

NEAS.4dfd78f6afadd50ce0b409d4ed9a9380.exe
Size

364KB
MD5

4dfd78f6afadd50ce0b409d4ed9a9380
SHA1

e1076da3c42a38be10b49e33913a89e000f93edd
SHA256

c34c4d6329cb815e66099a0fdd92a78b8afddbe09ba99d1c9deb0b34705ec267
SHA512

7f9da58b66261a9476d91db970ce0a5f9de2aa021c183fd4e90b6a8771657c17bdcef725192670df786053e2df3ff5777fc850b02da566e30cb120cac73c6787
SSDEEP

3072:gVMfMIbIyw3J98zq1WveBkctPzduptBlW+BC3K5eqU+BC3K5eqYroG:NfMmcEeBkcpdupQK70K7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4dfd78f6afadd50ce0b409d4ed9a9380.exe

Files

NEAS.4dfd78f6afadd50ce0b409d4ed9a9380.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ