NEAS[.]ca9b2a8f3bcca1c136e4ed2085d361e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ca9b2a8f3bcca1c136e4ed2085d361e0.exe
Size

305KB
MD5

ca9b2a8f3bcca1c136e4ed2085d361e0
SHA1

6cbfea38106e856d025e5313745252dfc654012c
SHA256

f7c7eb90dacf685b31a3dd87c73ae37243735b24689b103ac259ebc9455d592c
SHA512

bdd595173c18502f0ad8cd2efd682afdc119c3e940eaf6f1ea316752e66fad9e8d3ec5ea3f1cda152d200911a0cf3d59d93fd0c501b5be1fe5f4dab92f6d9f11
SSDEEP

6144:L36VRTsgFf8P1OmWAbqlT1mAvApZlpew+ABFTelEwlqR/tgxd70h3XCwp6N9IC3i:LTgFf8P1OmWAelxmiALlp/XF6lELIxdW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ca9b2a8f3bcca1c136e4ed2085d361e0.exe

Files

NEAS.ca9b2a8f3bcca1c136e4ed2085d361e0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ