NEAS[.]9334f8b47d69791ae4a1dbd121789b20[.]exe | Triage

Sharing

General

Target

NEAS.9334f8b47d69791ae4a1dbd121789b20.exe
Size

372KB
MD5

9334f8b47d69791ae4a1dbd121789b20
SHA1

1af67dbcf3a5d4dc6c858c03535ee8e00a21a41f
SHA256

10877a5408fc2167ca40a9752acd6bb93e7e8e9931f6c5dee5c856f143d0fe5c
SHA512

db58f7b5518ae4224fe2d5e468a1b89155315a9db05f04a8f3e2d8f5d820dcf90e7c9d20b7aa592cfbdee3c9e9455a8129af58cf2c2b33d319c31d019cc4025a
SSDEEP

6144:KrP3fM04JU6sv+Q9BY/58MsB+tib95/2mjHRsww:KrffKJUFmBjXiimjxh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9334f8b47d69791ae4a1dbd121789b20.exe

Files

NEAS.9334f8b47d69791ae4a1dbd121789b20.exe
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 302KB - Virtual size: 301KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.eh_fram
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xbase_
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ