NEAS[.]01a353717f634e5229e2a0841863f6f0[.]exe | Triage

Sharing

General

Target

NEAS.01a353717f634e5229e2a0841863f6f0.exe
Size

640KB
MD5

01a353717f634e5229e2a0841863f6f0
SHA1

290918a378ffef1b5fb0beb6998c5364ea5cfacf
SHA256

baf1692418c380cb5073a0db2ec0f39c189e6e1c52ad1b2166c070021d4d9cde
SHA512

0810f47a50736340867f9ee93a2900ddde57fdb5b197c5d39d6a4d63bf22ef1141082c0653514e09b04d22cfe6445daffc3c54db615006d86e0be337e0c1571a
SSDEEP

12288:cBws6vFhIEbJ1KEPRL4AVs+n0RzHrOIFv4GltQ5AfQ:+uL31bPZijBHrOIeytQ5l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.01a353717f634e5229e2a0841863f6f0.exe

NSIS installer 2 IoCs

resource	yara_rule
sample	nsis_installer_1
sample	nsis_installer_2

Files

NEAS.01a353717f634e5229e2a0841863f6f0.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 235KB - Virtual size: 234KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.khe
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE