NEAS[.]2a42cfa26f918d3635354cef842b8ef0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2a42cfa26f918d3635354cef842b8ef0.exe
Size

70KB
MD5

2a42cfa26f918d3635354cef842b8ef0
SHA1

ae51aff39a36ddb0658c782da60d5e7494af190f
SHA256

1ce1081e6cfdeb551a5b95bae9868a5d520e576e5fb40836cb70d5d296bf078d
SHA512

66176441bbd975fadd0eda954cb892299e53b3c42b515e7f17e7d5b99286b8433c5ac1e62f929efc82a3c6e068226d72447f78946584f01ae85d4d0945a2332d
SSDEEP

768:T9ECL7YPvPfhBLCY5RRHV5GuUt9H+HRCVpNOJ55DzdaAXL7yXcEB:gDGuUYCVpy5nV7oB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2a42cfa26f918d3635354cef842b8ef0.exe

Files

NEAS.2a42cfa26f918d3635354cef842b8ef0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 16KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE