NEAS[.]4c1bd41069810f73327050868067ba40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4c1bd41069810f73327050868067ba40.exe
Size

472KB
MD5

4c1bd41069810f73327050868067ba40
SHA1

cfc69fb77a66fa8988cf59d4e3f30c3bbdfc25ba
SHA256

d7fa1d840efdd61582099fe63e7e428029d2486086adf0da0eace7bcc64844a5
SHA512

fe74d7bbf444906dd890fc74ea11d94e4b3f44279cca8677aad9fb101ac64c4772bfdec77c9986dd5c8ce931e2d3ba7a344471b3130a76c13816ed576304c35a
SSDEEP

3072:r8RinudiP52xx67lLdSiHDomNHjbVVnUYETlPaHta2j5PM:YkgiPA6RcPmNHUYAaHw2j5PM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4c1bd41069810f73327050868067ba40.exe

Files

NEAS.4c1bd41069810f73327050868067ba40.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ