NEAS[.]f6a462f680f8341b6a5a409fecf8bc00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f6a462f680f8341b6a5a409fecf8bc00.exe
Size

420KB
MD5

f6a462f680f8341b6a5a409fecf8bc00
SHA1

5421d562407c541b5af6e484132f84f3c54cced0
SHA256

71624846ea42a755ec3693af51ce63d342a5ccb29bb5c10ecce024bb891786d2
SHA512

2fbc6240a2d4cf35e46827a1e5501d590aeff39d1c217e4d7cd4b42358dc4f47a644b82808df0153e0b05d0fd8373f583bbb1d098bb5e48f750ba3f7d5f4e09d
SSDEEP

6144:Dtn2Ui01I4rYYGs4IuX+7Utda59cxVLtWLhjW+SjdVi2exvIKsAHp:DthDrC1xdI9cftWljW+u236KsA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f6a462f680f8341b6a5a409fecf8bc00.exe

Files

NEAS.f6a462f680f8341b6a5a409fecf8bc00.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 210KB - Virtual size: 209KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ