NEAS[.]afb5e63a966a42eff9249ed832afa4b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.afb5e63a966a42eff9249ed832afa4b0.exe
Size

57KB
MD5

afb5e63a966a42eff9249ed832afa4b0
SHA1

a089f73a0800a6971dfc465268dfcdc936943c2b
SHA256

9cf26237550850df9715ba51018d282d0b404568117711ffd0b4b57c2550e673
SHA512

ec8b54ce2092a56071e3ac2d6bafbebf71a09089136b3ba9e9b1dca7f87d293e036f426b2c07bbade0d7823b883db9b4b1b3f78e88e187a50aa6d24c503c81c2
SSDEEP

768:OvAf4LSg7HeF76zCmZzB9LrYUwvppppppp3JBp17Q1dsonRhyrVEVxZUi5AAXmAK:Ovc4zeU2mZ99LrhEppppppp5BT7R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.afb5e63a966a42eff9249ed832afa4b0.exe

Files

NEAS.afb5e63a966a42eff9249ed832afa4b0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 808B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 113B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ