NEAS[.]8207e27007f1722487c691f9cc020c40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8207e27007f1722487c691f9cc020c40.exe
Size

22KB
MD5

8207e27007f1722487c691f9cc020c40
SHA1

315319a31280ef00400ed83011bdf29d1281867a
SHA256

a706571c661932e9c37b59ffbf05eb39153fbbadb0281d74c3ddea3d8f1ac5bd
SHA512

26c2729dcedc0df156c38d38b990632b32acba725764b9a860c161d02408cdd63686c8b598cb9d7c407f38ef29f6750067c29be8f3f95e275a5fd2eb514e1c75
SSDEEP

96:kDsrX6tfMPFE+azj5fcfnp32CCRkrMsixm/gaVqmk4fTkT1yZ/kDquqp9XJtU3SW:kWu2F9EYpmaAsiE/Smzrt/h99yC0Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8207e27007f1722487c691f9cc020c40.exe

Files

NEAS.8207e27007f1722487c691f9cc020c40.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE