NEAS[.]fde3a7e67a4db1e42c3d7e57ccc2a900[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fde3a7e67a4db1e42c3d7e57ccc2a900.exe
Size

391KB
MD5

fde3a7e67a4db1e42c3d7e57ccc2a900
SHA1

c489e17c2d6b26c6a042cf55619ad78212e534cb
SHA256

2b94e017cf0f83c6729cd241fdc8ef805ee29e61bd8b38ffefd3624f35d58f80
SHA512

c1b4c45a41eb5abd5ccde1069bf69c8a6d216d1d26ef0542b17e7527722a2c8bbe1c55f7e168165ff468db5d38a3bf21bcbf9b4a004e1899978bd50efd51b4b1
SSDEEP

12288:KHBT9XvEhdfJkKSkU3kHyuaRB5t6k0IJogZ+SZE:Kx9XvEhdfJkKSkU3kHyuaRB5t6k0IJon

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fde3a7e67a4db1e42c3d7e57ccc2a900.exe

Files

NEAS.fde3a7e67a4db1e42c3d7e57ccc2a900.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ