NEAS[.]88c5f3edb96777aa21d9924833b305a951fba37072318c94cd38b81adc9f6634[.]z | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.88c5f3edb96777aa21d9924833b305a951fba37072318c94cd38b81adc9f6634.z
Size

824KB
MD5

0052d9798fa67e9356e94f11beda0cfa
SHA1

3ed8ae3a09059d860ec3b445eb1078a137bad7ac
SHA256

88c5f3edb96777aa21d9924833b305a951fba37072318c94cd38b81adc9f6634
SHA512

b694dd75ca13bc7c84a2ab4f38bce1f531c36646487a0ab420375ac63368e2aad5e2e885a0ce9848373fdd6e2f321c67a3f0f79f85cd6bf58ccfaad8e41e3b4d
SSDEEP

24576:AH48S3j5KK4OhfPWBqJ6ilzO7Plsi+2UEevjVr7L:AH45j5KK4wfPpLyPqi+se57L

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Payment for settlement.exe

Files

NEAS.88c5f3edb96777aa21d9924833b305a951fba37072318c94cd38b81adc9f6634.z
.rar
Payment for settlement.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1021KB - Virtual size: 1021KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ