NEAS[.]efb1a8293152b27811f50ef6d4663390[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.efb1a8293152b27811f50ef6d4663390.exe
Size

540KB
MD5

efb1a8293152b27811f50ef6d4663390
SHA1

8540bcd449f51231290490bae112a68aa2b415a8
SHA256

1282a92c879abd411be0a2802dda3dffce9bf3369e2dee07391485bc19743e6e
SHA512

2092831dd77da6207d974ea5bb2dfb6c50466f9453b5378e66b5f8fff736376f2e903cf8acc505dddecf2d14eab3db5fb9f383e9e350ec0dfc9b00aa53113de6
SSDEEP

12288:m/8l5TIXsZ62x31A73mkLfCTuE97v9q/ooTa5KZN0QeZQdI:mcT+862xGmkLC59q/fl8QZW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.efb1a8293152b27811f50ef6d4663390.exe

Files

NEAS.efb1a8293152b27811f50ef6d4663390.exe
.exe windows:10 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_FORCE_INTEGRITY
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 288KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 164KB - Virtual size: 160KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 4KB - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ