NEAS[.]977dc5d897b0423ff3d0c091b2f23980[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.977dc5d897b0423ff3d0c091b2f23980.exe
Size

179KB
MD5

977dc5d897b0423ff3d0c091b2f23980
SHA1

832580c9a3ea86187a12cf54a62c4bf8df18dd9e
SHA256

4d9bfd3396f2d0796076ad15a4ae9b695d678f9c67fc9938ca6c077071fdf41d
SHA512

d9df5902fba4f8e8255903911a1ee363d3a6038964ad732c760cb2d3cf4696cdd021d0e3fa46adb1af57c639212cfac96379315abacfe83d3ff9501af9f4f116
SSDEEP

384:E0GRKkFyeItGRKkFyeIZ2mmCgx+cLsaCgx+cLswPNPNM4H+:qKVeIuKVeIaCgx+qsaCgx+qswPNPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.977dc5d897b0423ff3d0c091b2f23980.exe

Files

NEAS.977dc5d897b0423ff3d0c091b2f23980.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ