NEAS[.]2af5e9396bf688ebd333d2417d76d9e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2af5e9396bf688ebd333d2417d76d9e0.exe
Size

109KB
MD5

2af5e9396bf688ebd333d2417d76d9e0
SHA1

ba2dfda29d8dc1b774bdef078a0686bf51dc8b1b
SHA256

265f90a95e85f1b0f50763c59568c5e721ecdfa80f6e970ff11b95fa10400683
SHA512

7c3c10bf023d4c3a102585ab17b684684d75101457997a3673d35f91780756880d66ccf64e323ac5c494c4873d3bafc64d6c262f5f482e01f923a3b35cc39a8d
SSDEEP

1536:CN38wH94WCxFsonyI4BBvQQjrk8L0PcTnwEpObxlitOmWZsNrVMjkrDl9HNS:WpGxn7sXjY8L0PcrpOGimrCkrD7HNS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2af5e9396bf688ebd333d2417d76d9e0.exe

Files

NEAS.2af5e9396bf688ebd333d2417d76d9e0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 64KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.clr
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vm
Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE