NEAS[.]fff78d444d08ff73cbc882e2745bdd70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fff78d444d08ff73cbc882e2745bdd70.exe
Size

239KB
MD5

fff78d444d08ff73cbc882e2745bdd70
SHA1

ebd4e21d7578cca282cb8007039685543be6e28b
SHA256

26c4273476fe8ddb70587618dd9143b42ddfc8891a49f06f4a4c1604701f1bf8
SHA512

93e7829a898a0e146f967ae505af84c733d887f0793aef0bfe7d3be23050fb8c9f90e457f787d5da8be8e984a4dc3c29d9ea3107ae976ec806559fc81c0b9b39
SSDEEP

3072:GSP+D7OP6ex5t3L0UGwxowWyRuw2/UbkcQ5eCNKLpJblOlduvVpy4KPLQp/ih8dV:GA+DKrtLJxRb4GNJ5cdutpCY5dM+4Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fff78d444d08ff73cbc882e2745bdd70.exe

Files

NEAS.fff78d444d08ff73cbc882e2745bdd70.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 119KB - Virtual size: 250KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 22KB - Virtual size: 50KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 28KB - Virtual size: 208KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 53KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 13KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE