NEAS[.]00af7ee2ec37ea581f9ba5f22fb8dc30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.00af7ee2ec37ea581f9ba5f22fb8dc30.exe
Size

239KB
MD5

00af7ee2ec37ea581f9ba5f22fb8dc30
SHA1

b6e470ff6131668922cc685b06306ded3dba3df0
SHA256

348e54a1cadadfd72730ba8db1ea588c103fe4ed5934562a062d2d3581123994
SHA512

04cfed8f7736d6c2933afd923e4b6869fcdeee9ccfc05a4ec09fb4a1647dde12e5559cfce71ec9f2b8b732de2f0c3306cf3c4bfb0e7afa7e7618e71502c0da20
SSDEEP

3072:zLpuie2/h6sPq3ldTx7X/z+zRE1nYab0zZG/EJMaWJS6nUXDinX+TFq+7ZEztHou:lv6sPlz+vbCmEJBZ6UkX+k+7ZctR3XdH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00af7ee2ec37ea581f9ba5f22fb8dc30.exe

Files

NEAS.00af7ee2ec37ea581f9ba5f22fb8dc30.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE