NEAS[.]e9909bff30466ee1afe2b62b150aab80[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e9909bff30466ee1afe2b62b150aab80.exe
Size

193KB
MD5

e9909bff30466ee1afe2b62b150aab80
SHA1

ced412c164dd0a8eda81e5f3f0b059f5182c9703
SHA256

ceffe6de8c18fbf8320229a1eb993d0405ce12e146f4f0cff925947681c727e1
SHA512

bd076db4464db274d013f686209ab98502c65fb50f0cb3bbd21bc7978fdc9f2ec3802b8696c3f3ee9c7ad87ca359c256b93e555318786f0fd5a9069a372abb1d
SSDEEP

3072:383/BziLFFRRPGi/QEuEuxQh/h0dIIJTOhAjKSckiZI4PC:I2HRFGHrrhIEOoiO4PC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e9909bff30466ee1afe2b62b150aab80.exe

Files

NEAS.e9909bff30466ee1afe2b62b150aab80.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ