NEAS[.]48038fc880aac0a469aab2e01745dcb0[.]exe | Triage

Sharing

General

Target

NEAS.48038fc880aac0a469aab2e01745dcb0.exe
Size

213KB
MD5

48038fc880aac0a469aab2e01745dcb0
SHA1

1ccfe73556f7467507e4b345bbc78338274db727
SHA256

8c522840344556f98e0bca1921c20d7070bfa403a7082bc10ac2edc8a70d5c17
SHA512

4c48dfc21b5e8c437e647641ba6298fa2cd3b3506c0a1049ed3b86c4bfffa69d57847af7c56bc3dad473fd446b56a9a8804e5a641b9835f1a378757c85d03f91
SSDEEP

3072:iOAEZIt+asrmh1yd7sWEideCaG5ajEQmnOJJ9m2ZIjE9Hs4brjUFnoUnf:iO4ULKh1g9df83HZbUq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.48038fc880aac0a469aab2e01745dcb0.exe

Files

NEAS.48038fc880aac0a469aab2e01745dcb0.exe
.dll windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.data
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 176KB - Virtual size: 175KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ