NEAS[.]af70f17675f85164321729f98a808460[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.af70f17675f85164321729f98a808460.exe
Size

141KB
MD5

af70f17675f85164321729f98a808460
SHA1

ed642ea658881d3d52731bf34d97c79e38994475
SHA256

2cdbb5c762ed98ae3601583d3c245a9748ad2463fbc26eddb8779423e48d89bb
SHA512

e88548d562361952d6f9713b2d780fdcfd853614b3dd1ebd71a210e0ef78c1bb91528a5136456b2f3e8446842dadaed81e74c224c202eed00bfca75b701ae190
SSDEEP

3072:RGmRmNJToTJfp2D1QzpSyiJEkGSPf1bc4lz:RGMmfToTJY6zpSyvkGSn1tlz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.af70f17675f85164321729f98a808460.exe

Files

NEAS.af70f17675f85164321729f98a808460.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Compliance

Sections

.vivi
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uiui
Size: 134KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.po
Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE