NEAS[.]1603965b5c4f040afc038ecf5897a920[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1603965b5c4f040afc038ecf5897a920.exe
Size

164KB
MD5

1603965b5c4f040afc038ecf5897a920
SHA1

fcb83aa814990657d1bc1363c694da18606df561
SHA256

db6a94af9aa2853280ade895d43210a014de880e9829c17a0699456875a78314
SHA512

8e8a9d94532d5fd3f358f51db6493bd0e606de56e21778be20057c0b7dbaafe098afe9de506642cb58dc773b5895148f7256fd6bfb29c00e7355ebb81ecdc40b
SSDEEP

3072:rpKsbbmq3aGxYkROOUyhAFYIh7ERmW8KchHq+SZF0Q5Az5Illr:rMsbbt3aDkRO3IISRgKchKFGF5I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1603965b5c4f040afc038ecf5897a920.exe

Files

NEAS.1603965b5c4f040afc038ecf5897a920.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 432B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/1528478
Size: 4KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE