NEAS[.]ca74e6f132b82ac3255e5736b0513550[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ca74e6f132b82ac3255e5736b0513550.exe
Size

4.1MB
MD5

ca74e6f132b82ac3255e5736b0513550
SHA1

e0ed4d2f8fe08f9da3dd7cd04dd0754bb69d95db
SHA256

22e61d0a8791b137dcb1430b7755aaa0f5a8eb45ad5cf51977f8ff31e4a53d42
SHA512

84b467d715673152bbba213d9957c857215a10847a023a90eb99243ffd40b5ee00888586a77b12c995448531a8ab44871ab5e40da5b683ac3f83f8d92b83af91
SSDEEP

98304:8qFC5h5lTcf4sYDHbZaHy1W69ym05ljrBIO/:8qQ5jeODVa1rmUn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ca74e6f132b82ac3255e5736b0513550.exe

Files

NEAS.ca74e6f132b82ac3255e5736b0513550.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 127KB - Virtual size: 126KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ