NEAS[.]125b3913775e76c9575ca29e5c329280[.]exe | Triage

Sharing

General

Target

NEAS.125b3913775e76c9575ca29e5c329280.exe
Size

38KB
MD5

125b3913775e76c9575ca29e5c329280
SHA1

faa58569de4ea450f460545c214304a5a4bf8a2d
SHA256

17cbb2e4332860f6e554026239cc873d78fe37ea720e6549d7d90324bc056747
SHA512

9471243bdc271f95e4722e4db47cc497758a77be77c188694c8bb9304555c300e839927caa2d8ae68a0b3d40241b2a1cbce322ff9f01756d4eaeb03af9b42a48
SSDEEP

768:uPE6LcqyMarAMFBZ6iTsEPxbnw261iX95yP:yEunMEiTTPxzw105K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.125b3913775e76c9575ca29e5c329280.exe

Files

NEAS.125b3913775e76c9575ca29e5c329280.exe
.exe windows:5 windows x86

861a6841e438af53fb014047312bf82d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

spreadll

PayLoad

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.senna
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE