NEAS[.]ed612d6a950cfa23b75455466dfd4820[.]exe | Triage

Sharing

General

Target

NEAS.ed612d6a950cfa23b75455466dfd4820.exe
Size

364KB
MD5

ed612d6a950cfa23b75455466dfd4820
SHA1

b9e8b63a6816415c85445877618deb77c12e6af5
SHA256

3d0a9dddeb6f94975c5c5950483da4d1290c421ecc77a2ede0ecd5944a6b34a2
SHA512

a9dbd73b18c6baef310b28ccb80db84bdd4fe4f84148864f66bd907b94bddf0ddd1f17337e7d8d4ca6b2d685781c7ed8a9388e29e68551f7fec3c10d2b57f099
SSDEEP

3072:XVMfMIbIyw3J9qmkrOIO//uvLUbTbGDlL+BC3K5eqU+BC3K5eqYroG:CfMmcU3rOIO+uTbGfK70K7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ed612d6a950cfa23b75455466dfd4820.exe

Files

NEAS.ed612d6a950cfa23b75455466dfd4820.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ