NEAS[.]e4952841c1e773ffaff9a5ae0b537490[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e4952841c1e773ffaff9a5ae0b537490.exe
Size

604KB
MD5

e4952841c1e773ffaff9a5ae0b537490
SHA1

6ea29e7f33be9a151d35a90cfce4a5280438256f
SHA256

a8d15676ed567fc7010d8000222f25851a063a0fda5d0b1fffd196f3f48a47b5
SHA512

7e24a27b0dc2749b53dd0a1f15c99d5c9222cf6cb7c531a8742f5b633eea329921fcb851bb68029cb78eadbf0860cdbd493b9b71fb167ce4935de909d278d798
SSDEEP

12288:g5K+Uv5+y+W35ZlyE0XJ/9d8DRXgVPqaoXNoEix12UDlj3z2A:gA+A+xW3vUE094XKqa8SEiGURj37

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e4952841c1e773ffaff9a5ae0b537490.exe

Files

NEAS.e4952841c1e773ffaff9a5ae0b537490.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.MPRESS1
Size: 578KB - Virtual size: 588KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE