NEAS[.]41f452fa22e737a2af66d9ffa0fbf5c5[.]exe | Triage

Sharing

General

Target

NEAS.41f452fa22e737a2af66d9ffa0fbf5c5.exe
Size

41KB
MD5

41f452fa22e737a2af66d9ffa0fbf5c5
SHA1

177ac84094f36f061771b5144e5aa3b101a3f05b
SHA256

edf97354f8391c05dc1cb272d8065a06eefb58ca60f0f65c1e06fe6b3a70b73d
SHA512

9403a7e4af725bf7063372d6cfad9796d0a3e8249686940ff49987f3e5b820d49c3fd14f1d043a179c51c2b864aaf9847a876a54600ceecf6510e6267ce19522
SSDEEP

768:xIP5WOMVs4PSV06ymNNC6S7Cm1n2OBGRIWNSE77DPQ1TTGfGYh//:xI0OGrOy6NvSpMZrQ1Jo/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.41f452fa22e737a2af66d9ffa0fbf5c5.exe

Files

NEAS.41f452fa22e737a2af66d9ffa0fbf5c5.exe
.exe windows:4 windows x86 arch:x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.MPRESS1
Size: 19KB - Virtual size: 432KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE