NEAS[.]50d389b3c380659a46cf0bbefb9c1020[.]exe | Triage

Sharing

General

Target

NEAS.50d389b3c380659a46cf0bbefb9c1020.exe
Size

1.0MB
MD5

50d389b3c380659a46cf0bbefb9c1020
SHA1

01534a3e3b4004f0441efb87f252046fedab6586
SHA256

a717dbb08a9c78d7b95108f6e86467c4f69bc9f84e2d8903b58b751b7c387768
SHA512

5e5be891d415d5dce6dab59069a817bd1a1aade3d78d12e4a8da0eceffa9331256e723e4646ceda4981bbd612254b3c6a6c88ccbb4488c1b6ea9101eea48ba3e
SSDEEP

24576:YEj7mhpCQnTJqJjGdHXXMBXWpZoMrAP66hVEeUZXf/ZcRiPv8KxOu12I7e8KL:Yi7mhpCQTEJ6dHXXMBXKZoMrAP66HEez

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.50d389b3c380659a46cf0bbefb9c1020.exe

Files

NEAS.50d389b3c380659a46cf0bbefb9c1020.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 220B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 903KB - Virtual size: 903KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ