NEAS[.]d4771bd3812dd9c8b857b4d054121798[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d4771bd3812dd9c8b857b4d054121798.exe
Size

464KB
MD5

d4771bd3812dd9c8b857b4d054121798
SHA1

094ff4731f6f37e91a055a7d58b56a8eb3e68466
SHA256

7568fdab097a71c3ee7aae268f1100c034438287345fd8bb46cf479446c0b260
SHA512

9914d02401b6213720c899b0515ce49683cf7cd7fd8c3ee7f553b0c5b42417f1431eb4fcc8a71262bba3567d2ebfbee26506cbcac6459ea45d96164214c415d0
SSDEEP

12288:K5lc87eqqV5e+wBV6O+vdJRftECPl1tVN/xDnJK+NehY6:K5SqqHeVBxS75tECt1t/6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d4771bd3812dd9c8b857b4d054121798.exe

Files

NEAS.d4771bd3812dd9c8b857b4d054121798.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ