NEAS[.]e18542a450d8ab0460c9cad9f00e5a90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e18542a450d8ab0460c9cad9f00e5a90.exe
Size

499KB
MD5

e18542a450d8ab0460c9cad9f00e5a90
SHA1

39267e7d0c695c2a955c5eeb2db7744775a1fa59
SHA256

dc67f2317174f8e2d163f8c080bf7fbcc986c0a2a4176e9900b8d4973e94e469
SHA512

8a2fa053921d9b936c871ff6e6d30fde158e9aa5efc88c0b77071da59b63eac7f54089f876f0f3dd327f6a2ffa3a6e20e73d28667edb5bacf45584b969d9de45
SSDEEP

12288:tehnaNPpSVZm72TFafJiHCWBWPMjVWrXf1vR:teh0PpS672TFU+CWYPMeXf1Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e18542a450d8ab0460c9cad9f00e5a90.exe

Files

NEAS.e18542a450d8ab0460c9cad9f00e5a90.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE