559990f309f87b9f1e6ba06c93ce3740_NEAS | Triage

Sharing

General

Target

559990f309f87b9f1e6ba06c93ce3740_NEAS
Size

299KB
MD5

559990f309f87b9f1e6ba06c93ce3740
SHA1

125dcbc9501bdff9a3e7961a482334c61f82b1b8
SHA256

ce27ff834c1079303ce6c2b2709059bfc60e48c57931722342ff7c559847a35d
SHA512

33a1473545541f31c72b063bab39f27eaf632f29072e0f85c01909ca9902b16de03cf2369a3341f2f9e59d9e4a62e244711126471128794925652655245aa044
SSDEEP

6144:9M9wGsBLqRzpVfX0ekbfrhrX9FKCg+AqprNde6As73P26GPeQbXD:K9wBLqdsX9UarNQNs7e6jSD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
559990f309f87b9f1e6ba06c93ce3740_NEAS

Files

559990f309f87b9f1e6ba06c93ce3740_NEAS
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 965KB - Virtual size: 965KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dtd
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.dtc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.phx
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ