NEAS[.]8a609f10767734827cdd80a91255dd70[.]exe | Triage

Sharing

General

Target

NEAS.8a609f10767734827cdd80a91255dd70.exe
Size

3.1MB
MD5

8a609f10767734827cdd80a91255dd70
SHA1

e00005de69a9e7639a30d5006194ab0101d9e42a
SHA256

0c3c478f128db4164a598be80cc99fed93ebc38c9e91ddf2565e9cc4161c0565
SHA512

2eaab368d2ddf42b830e65e8f0acdf4a5a735d7420c5f8a55e8c17d62cc015a2b5801695fe3a2489c562a7fdf81717bbfb7484e13d823f7fec74695676bf4020
SSDEEP

49152:qymcv3K3uqx1y9ZpVS/HpaR95EKhdl7FVFbbQGJqBzCsfoE9cCB/Q:qyD3MuqfSW2X3hLB7UzdAEm+Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8a609f10767734827cdd80a91255dd70.exe

Files

NEAS.8a609f10767734827cdd80a91255dd70.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 2.0MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 174KB - Virtual size: 3.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dwka
Size: 948KB - Virtual size: 948KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE