NEAS[.]8cc2dca915d28ed71bd3ee0bea00aa20[.]exe | Triage

Sharing

General

Target

NEAS.8cc2dca915d28ed71bd3ee0bea00aa20.exe
Size

388KB
MD5

8cc2dca915d28ed71bd3ee0bea00aa20
SHA1

426679e5c609ad8575f32dd8f25a7381ef895b97
SHA256

d7cac5f0225350f9659520650f34aad1b4f4a3c98a6ec741898627e64fb4f814
SHA512

a0bf946dc5cef75ffb8b47dc740af259518a2f291d8e718ef12cc716917e5ca2fc60ece58a2570b58813a0d08d4971b48e6136635cd79bb89435c9db9b4db6b3
SSDEEP

3072:VVMfMIbIyw3J9FTHsUsEml2+BC3K5eqU+BC3K5eqYroGp:AfMmcHTM9ElK70K7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8cc2dca915d28ed71bd3ee0bea00aa20.exe

Files

NEAS.8cc2dca915d28ed71bd3ee0bea00aa20.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ