NEAS[.]f056e2e7931d2a3be7461058049d4890[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f056e2e7931d2a3be7461058049d4890.exe
Size

416KB
MD5

f056e2e7931d2a3be7461058049d4890
SHA1

e763a551c60f70ef573defe4693358b371a514e4
SHA256

9a6c3904b7c2d1ec8b4fcd745bc6eaff1032ade1a5c654b141f0fa3d79949b39
SHA512

0f47ccb29ce42dac94cbc27f76e493af01044088b76df72cbdb22dbb0f93d61e63ebc5c11b7972a347e6f9561b94cf67d48efcba7b3d31eee2b7a29a8a12fd25
SSDEEP

12288:WvKhJzaTKYJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:yoJz4KYJ07kE0KoFtw2gu9RxrBIUbPLs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f056e2e7931d2a3be7461058049d4890.exe

Files

NEAS.f056e2e7931d2a3be7461058049d4890.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ