NEAS[.]2d26e2745fe499fe490e4d2407939f30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2d26e2745fe499fe490e4d2407939f30.exe
Size

64KB
MD5

2d26e2745fe499fe490e4d2407939f30
SHA1

698839c9882e7d3ad5944c39e25edd24be6752d5
SHA256

3ce25c5a9c70d47ddaf1ea8d07ef08bd8de3d9e9f5f5a2d52b9e6c75bf66190b
SHA512

6445db5dcd88ed5fce21d2a6bdffc7fcc40c8e3f903ad56b73166550db96bafe1ee49c126af04b542f0298e9da2f2cb6feb9c18d7d916b06b394369f9687bb31
SSDEEP

384:x0VkMq01bJ3wtEwPS8HLEh+Jagz+3be+26a3WB7RYp055TOtOOtEvwDpjqIGR5d:xQz7yVEhs9+4WR1bytOOtEvwDpjW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2d26e2745fe499fe490e4d2407939f30.exe

Files

NEAS.2d26e2745fe499fe490e4d2407939f30.exe
.exe windows:5 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 17KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE