NEAS[.]91de7edab664ea907e4ee91d811c0f60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.91de7edab664ea907e4ee91d811c0f60.exe
Size

242KB
MD5

91de7edab664ea907e4ee91d811c0f60
SHA1

e69c6e1669c9b7f8ac37a6a57d94f911242087b9
SHA256

2938ec73b09d73f69b738e8dcf4034552d9680fa18fb1c5b0db4d7e31dbc2bac
SHA512

8bf88fd25a55902c0009eeca6104b7cb27e9a68ced56ad8e4ef0cc5a799263216010bf6f0d6f894c4b768654410424b660e454368ecb6f6a78f6b6a73d3117f6
SSDEEP

1536:xK8mfMP8vTYugOwK2/7H6mJRA4d+jOCkQvs9ZhH:bgbgON+HTJ+OCbvsdH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.91de7edab664ea907e4ee91d811c0f60.exe

Files

NEAS.91de7edab664ea907e4ee91d811c0f60.exe
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 95KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 2KB - Virtual size: 288KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

OKJHG
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE