NEAS[.]85094ddee897aca2e20352a31e23d010[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.85094ddee897aca2e20352a31e23d010.exe
Size

256KB
MD5

85094ddee897aca2e20352a31e23d010
SHA1

bc8dbdc0658da5f1ff93a6eab0b7c963d86ee6da
SHA256

5adf01c10eff9b03f2b337a7c95232b984b5c5038c7820d81a1138d6669b977b
SHA512

831a0d290f13ca50f0f9ddbe47cdae25a076b89f0628615dd0b51759f40dd52cc14104566dd5e668ffbe84deeb9978dae4ba283f4efbb240f1df84afdcd55cc4
SSDEEP

3072:Z7vHbtCXRvjxCb5NgXDY7uSK4aqTB3/tCFgmQD:ZglKgzeYqTxmQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.85094ddee897aca2e20352a31e23d010.exe

Files

NEAS.85094ddee897aca2e20352a31e23d010.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 140KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rmnet
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l1
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l2
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ