NEAS[.]543612f5357c2048d4c8c79a418f4520[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.543612f5357c2048d4c8c79a418f4520.exe
Size

504KB
MD5

543612f5357c2048d4c8c79a418f4520
SHA1

99821a520ce910baab54851018c68c5f884cd99e
SHA256

c40816a18492e71b881a56793bd1b6bfe6a1f4117dfbc19d5039054df3e7ed3a
SHA512

794f362b5e5f5296f5217ea015fa34f36cf6d5f94a2cfa518c71f1fa2739ba0c4a2bc9160fb0fa905bc8126eb62c2714ae1600b65a680a1e3afb9ebe4d8b6ede
SSDEEP

12288:DEpM+9SVpJOvL8v3Q5rxVdVQcMti5qyN:DEpd9SVOT8/Q5hV0U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.543612f5357c2048d4c8c79a418f4520.exe

Files

NEAS.543612f5357c2048d4c8c79a418f4520.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 200KB - Virtual size: 199KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 182KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.l1
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE