NEAS[.]57af217a348d969dfbe6aa8f16ce8910[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.57af217a348d969dfbe6aa8f16ce8910.exe
Size

857KB
MD5

57af217a348d969dfbe6aa8f16ce8910
SHA1

8645eb3127fd5cc3e76ac9a3f0c79e0c7df9156b
SHA256

0f1deb12f6c1805016f93e8ffc37285e6759b0114f7b4c37c0d33927a243ba58
SHA512

a9c31d390fa754062a4d0d6d806e941dd30aa67e44d4bfc9f8516ba5aa029c0fb16792542bdc932cf6e8b70792d849eff6434fb7c418a43b0c7bd540976e2fe5
SSDEEP

24576:zrdRL01kQBdHdD3/RTLhXuOhK1tTMnzGb:DakgBdzBh+RTwGb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.57af217a348d969dfbe6aa8f16ce8910.exe

Files

NEAS.57af217a348d969dfbe6aa8f16ce8910.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 680KB - Virtual size: 679KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 64KB - Virtual size: 334KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xur
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE