NEAS[.]a1ddb6ec44f978a40af856b4e8dc9730[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a1ddb6ec44f978a40af856b4e8dc9730.exe
Size

10.0MB
MD5

a1ddb6ec44f978a40af856b4e8dc9730
SHA1

3f33aaa70eee0cb73c4df115f4df64bbec90ba91
SHA256

1074a4c26b6a51f46059d5feb180491054d08bc9011edc3062ed0e441d192631
SHA512

409d9518f19e7845aac6d30ceeab93088a4f9b74a5d91be46c3a3316916a1c4c5dd7e70ad79dde92c9489142dac5fe43fcd49e58c2ba544ac65a16a67afe3e2d
SSDEEP

196608:ki9fukYR5Yf6uqUG3yZxmlkT2k/XB8VcBL/yXvyhEJ1+RnFj99e2xayZXr6QU9Dc:nZl05YflfxgkTVfdBL/tEJ1+lFj99e27

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a1ddb6ec44f978a40af856b4e8dc9730.exe

Files

NEAS.a1ddb6ec44f978a40af856b4e8dc9730.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 10.0MB - Virtual size: 10.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rodata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 825KB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 407KB - Virtual size: 406KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ