NEAS[.]de5dc603b70cdc0915d7aadcbf4e0230[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.de5dc603b70cdc0915d7aadcbf4e0230.exe
Size

270KB
MD5

de5dc603b70cdc0915d7aadcbf4e0230
SHA1

71a6e182169035eb5d6bad1eeb23ed98f052c11d
SHA256

ef08bf12ce4543f73d2106d77e63662fdeb7fe5403cbec8b7cb0384934db31fe
SHA512

0f0f1c3dbd4666ba0973b7fcf230b78461397e2854df07949e153c8aa118842dd7c5caec2bfc8b80ef76db75b3e6f98c66374666e8b78a5e6c3cd2dac2feca14
SSDEEP

6144:MZ05b5kZ05b515kZ05mCUWiRUCxl5vWTGxeG:MDZLCUVVxXWTGUG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.de5dc603b70cdc0915d7aadcbf4e0230.exe

Files

NEAS.de5dc603b70cdc0915d7aadcbf4e0230.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE