NEAS[.]e42219a5a20dc72f0f1dcc19d0f46840[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e42219a5a20dc72f0f1dcc19d0f46840.exe
Size

281KB
MD5

e42219a5a20dc72f0f1dcc19d0f46840
SHA1

a9914f9c2d031c61f2b06e2bd8da3e5dcc238519
SHA256

9eb046855a80b26b59814061fffe0f87c8c0bd718883a55650af4591888530d1
SHA512

4709a055da7d12acbe07a4a26e337e8816f5265359c2d808c89e68e41374614d9431f7e0a2d4e671ad2c4176ee1b595c24b767a047ff38fe91067971ce7b596d
SSDEEP

768:O3iByu1gqUByu1gq6sks0vFpjpU4esgHZUA/R/qsww/DbAGw/DbAHP7LgXZOXBGf:nytyxsks0DjdesgHP9qs+AjkJOxghN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e42219a5a20dc72f0f1dcc19d0f46840.exe

Files

NEAS.e42219a5a20dc72f0f1dcc19d0f46840.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ