NEAS[.]5dc741f162dd071aeacbcd79d4b0d070[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5dc741f162dd071aeacbcd79d4b0d070.exe
Size

429KB
MD5

5dc741f162dd071aeacbcd79d4b0d070
SHA1

2e27622c2f504c7f4ab039ce378bde99ccd1b38d
SHA256

9e822a4e2bc0da0c702b3c044d4aedc86b55ea0823d630f9f05ba4732b3e3a1c
SHA512

915924edcd3ecb78f61c95e8fa204af8035052c744e4ed357c586e1b186c5d6b6631644f0dba9bab96e784ad85f00c10db740807f3168229b72aea391cf2a9dc
SSDEEP

6144:k1dlKgzelZNQSBQGH/CSpWqTVmQdNs6+X7jINs6+X7j:k+fBQGH6SfsQE6+X/l6+X/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5dc741f162dd071aeacbcd79d4b0d070.exe

Files

NEAS.5dc741f162dd071aeacbcd79d4b0d070.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 240KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 144KB - Virtual size: 143KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE