NEAS[.]a898c15c66c5f496985f93c8950f8950[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a898c15c66c5f496985f93c8950f8950.exe
Size

42KB
MD5

a898c15c66c5f496985f93c8950f8950
SHA1

9c6effb4817318e550ece6b2a477deb880c7ed44
SHA256

e143c150c63b0a422d5b7bf6d90a68d959f85367d0037d882aeec07209b312f9
SHA512

de8bbbb3c69c2a3b861c99e392c039c9d93a8c3f2a2a26be35effc5869f574f713e038b9e1746e45e5d54d25fea3c61af52ad39f863f0826bfa93d6ed1d45373
SSDEEP

768:WAUJmQCcmLCXQq6fsKiJYsIkjJVzqsVG5kuGVAQvXyk:RUNHFKQbIkHvGkATk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a898c15c66c5f496985f93c8950f8950.exe

Files

NEAS.a898c15c66c5f496985f93c8950f8950.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 112B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 768B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE