NEAS[.]71c87eb019d899fd823adca6d83a2255[.]exe | Triage

Sharing

General

Target

NEAS.71c87eb019d899fd823adca6d83a2255.exe
Size

1021KB
MD5

71c87eb019d899fd823adca6d83a2255
SHA1

57377b7028076f8c11afc31b4aee5b1d1913b9c9
SHA256

ad4cffc650d900a3efa8503150407163f34945af414fdb9c71520ab95832ec3a
SHA512

b6d345f96bfbe79001f521cad70ee56630c445a34679d12e9d4b81e4b32398ddb5b19ce49ee202d42e293024d15a0f2ff7520e028cf29d864f70df9eb57fa497
SSDEEP

24576:XJ1BuYsWeBVl2b+vhOUpkpSHU1r/eIhd:xu1fTl2bm8SHUV/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.71c87eb019d899fd823adca6d83a2255.exe

Files

NEAS.71c87eb019d899fd823adca6d83a2255.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 773KB - Virtual size: 788KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 49KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE