NEAS[.]bedef6bfbfcdf67cd303acc5ac7e4980[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bedef6bfbfcdf67cd303acc5ac7e4980.exe
Size

204KB
MD5

bedef6bfbfcdf67cd303acc5ac7e4980
SHA1

9f03e3038254b74d6941bac33d9a14f90e033244
SHA256

5d23ce6d904548927188a9da9ec04c3929a85b62bd89f68a0d1b3587db31cf9b
SHA512

040e62965f5bc7bb82c9ed7f0aaa39d0f46baf3d6a621b5feab3b1756aa9c8d710591d59194a6823bcc6500dea3d45a660b1af94c89719b68b1d918f055f6623
SSDEEP

768:N6cPsAifwZJ0cZGUk6vJOBdhqm2PeaiBWJQekHhD6U02p/1H5fXdnh:0ccYH/Gnc+hmlJQekV102Lf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bedef6bfbfcdf67cd303acc5ac7e4980.exe

Files

NEAS.bedef6bfbfcdf67cd303acc5ac7e4980.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kofbl
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE