NEAS[.]8298f24158644f962c31e38d9072b040[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8298f24158644f962c31e38d9072b040.exe
Size

368KB
MD5

8298f24158644f962c31e38d9072b040
SHA1

3fab459b35ab91e80f8edf3237fc9ac1ce2087bc
SHA256

def94193b0502a96305c55b2a7d7cf4b4901df0b6c6cdad9f41ffb3d4cf0d748
SHA512

5033f4e80c3410a65a6048d99c33f22803520f95de4d463de406d10ed0701f42bc23640e8f2f1cdcb8706d51818f275872b059f7e85150cd4ded00223905e220
SSDEEP

6144:DiZSbv3986uiWmtwBWJo7a0d0ARddVjr3TFNxsTHyVM8gPlW:D8wSmtwUJo7a0d0Fry0M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8298f24158644f962c31e38d9072b040.exe

Files

NEAS.8298f24158644f962c31e38d9072b040.exe
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 721KB - Virtual size: 721KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 101KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dot
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aft
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 270B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ