NEAS[.]da9cdb8241d23d70a34a8bef7d887530[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.da9cdb8241d23d70a34a8bef7d887530.exe
Size

151KB
MD5

da9cdb8241d23d70a34a8bef7d887530
SHA1

6bd3ff736bc61a8c57e18b5baa9a9847c3bf8424
SHA256

4083b82de7de85fa4873d9fa64036967605521432faae2d9d922ff5dba8bc220
SHA512

212c5a9eefa83aaffa9c030796cd3928c03b11b4906407075b572eaa20919d7ff9478eccf252f62c18b550740f7e97233195d5162423e1955b15ef568e834353
SSDEEP

3072:0t5GNW/mKHBRe4CYDXqKUICivXctgR4IOnvs1FFxqs8z6+Q:0bcWOKWu/E/iyIOnvszFTT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.da9cdb8241d23d70a34a8bef7d887530.exe

Files

NEAS.da9cdb8241d23d70a34a8bef7d887530.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ghop
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aw
Size: 55B - Virtual size: 55B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fbn
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE