NEAS[.]1c11a16f1ca86b7da75775bada9adec0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1c11a16f1ca86b7da75775bada9adec0.exe
Size

364KB
MD5

1c11a16f1ca86b7da75775bada9adec0
SHA1

c0ad71b853373314ba6c2fd95216a75b99eed2a7
SHA256

a4b40eb738bb8008671d9a8e1f22b6af564a910380c154f8bbf23754f2df28b9
SHA512

d1a2f871e6467bd599062a0f2bde598fd4116bc52bc202c3f7abae62bf47e281a3194eabd9e526edc0b870507eefd62dd0fef247813dbd6c9a1601577eb7b2d7
SSDEEP

3072:IVMfMIbIyw3J91r4Ha8iq/EDNKK37C8lA+BC3K5eqU+BC3K5eqYroG:lfMmcXKx/wKK3sK70K7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1c11a16f1ca86b7da75775bada9adec0.exe

Files

NEAS.1c11a16f1ca86b7da75775bada9adec0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ