NEAS[.]dc42dca59b90f72fe27cf1c3590b7ac0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dc42dca59b90f72fe27cf1c3590b7ac0.exe
Size

1.1MB
MD5

dc42dca59b90f72fe27cf1c3590b7ac0
SHA1

77b1c5f0331e1a3095875ab9d01284e0d40cbffd
SHA256

8d35d2c7c7e5a1533153c1a466d9ae414b0d1653e6150fd97d7d58abfe44f27c
SHA512

7f4c0f349ca48c926f7c200fd5bd67e504e19ef10cb4e814cec90554f14ed528e2d7b5f92e863c6008b77c4a929119113ff83962c1477e07dd8f79b795e930d0
SSDEEP

12288:Xj8S/1eHQGvSm05XEvG6IveDVqvQ6IvYvc6IveDVqvQ6IvIn+v7vc6IveDVqvQ6V:Xu6X1q5h3q5hkntq5hU6X1q5h3B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dc42dca59b90f72fe27cf1c3590b7ac0.exe

Files

NEAS.dc42dca59b90f72fe27cf1c3590b7ac0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jfbbql
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ