NEAS[.]bec41d5947bf9485457cc5fa71eab880[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bec41d5947bf9485457cc5fa71eab880.exe
Size

233KB
MD5

bec41d5947bf9485457cc5fa71eab880
SHA1

692c6be9f22c78200b26527d045e815d310a0648
SHA256

17933c53d609857c4485a668f0a987bd6d0664a09160b3e3394d2ebbd2f5dcbf
SHA512

685c629abdca73c4ba48f44ec50ab53798bcd075918edb36c5d0e8e678606de4dc928211a8411757c324fd06d3072b7597f5314e8596c14e591dcfe1b9714910
SSDEEP

3072:uwM6UuBJ6fT2CgWf+TLCUG0+Bv8wxYdrJ4ZMeKT2HOcuX:CDUOpUyJFPKB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bec41d5947bf9485457cc5fa71eab880.exe

Files

NEAS.bec41d5947bf9485457cc5fa71eab880.exe
.dll windows:5 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.data
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ