NEAS[.]56821354f49b06fd286b3a2c2d5f8220[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.56821354f49b06fd286b3a2c2d5f8220.exe
Size

672KB
MD5

56821354f49b06fd286b3a2c2d5f8220
SHA1

4ad105a39a5ced6046548abef977a9dff0b05265
SHA256

dadd7a62adeae129b232eab7440ce8dadd4eda4f8a7f6c5e5b1161bf9c4217f0
SHA512

0799a938739cc18d9bd993a1cb97869a70ef392f87e3763c8d320e06bf765966853c2e9cacc76d2ce1ecd1014fff858a3ab4176d1337f4f1bf833b65e756c75a
SSDEEP

6144:jFtzJV++EmNOceXjDtOOj3TLXylV0FQRiqfd1OEZ4Z:jFt9EmNjAjDtOOj3TLyWui+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.56821354f49b06fd286b3a2c2d5f8220.exe

Files

NEAS.56821354f49b06fd286b3a2c2d5f8220.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 78KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 120KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

JHDFRWG
Size: 51KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE