NEAS[.]171d8c2446254fb10280f86d36d036374260f1abc87c097f8329455e4df05070[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.171d8c2446254fb10280f86d36d036374260f1abc87c097f8329455e4df05070.exe
Size

218KB
MD5

f7c70e65578719cb549e75787f23d287
SHA1

9d7da836b2374f95ea647bf1c33fa26d279ffd5c
SHA256

171d8c2446254fb10280f86d36d036374260f1abc87c097f8329455e4df05070
SHA512

83b9c9146ea0f6c4ac576c14386915405bfabe70b3b71cc665f0b63531d5e025921452a2290e0544a8644331fb8cf6ab93d3ee9ef19f9d7354c416d6227f45ea
SSDEEP

6144:LQBk7JjX74cN0lrztgwU0Wyw3mFygyE4mz:LO0z8e0lvSr0Wyw20K4mz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.171d8c2446254fb10280f86d36d036374260f1abc87c097f8329455e4df05070.exe

Files

NEAS.171d8c2446254fb10280f86d36d036374260f1abc87c097f8329455e4df05070.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 621KB - Virtual size: 620KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 191KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 18KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ