NEAS[.]294674825f25473c90d8f07fd53bc790[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.294674825f25473c90d8f07fd53bc790.exe
Size

390KB
MD5

294674825f25473c90d8f07fd53bc790
SHA1

30c7e9ce4e51716217a5f87aed0f160d9294ec6c
SHA256

13feeb00cf6c32d54d2737863639d029d6fa0d10c83ab363aea954ec70c56ef4
SHA512

80a6cbd392592ac79278dae74b47a5ed23c08bbe2e5db8b130cfef3ba6d64a89b503a7e7b6543ca9223b62741d6dee3835be66c88e7f6f7138a0f6537864499b
SSDEEP

6144:hM3YL/t3gKZMK8bwGJ5wz3qudBxX1fBDyV6X1fBDykz:Mu/7eiGkz68BjZDyVIZDyM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.294674825f25473c90d8f07fd53bc790.exe

Files

NEAS.294674825f25473c90d8f07fd53bc790.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 432B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 135KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/8259831
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE