NEAS[.]fb8be69bd8c1f2576c38b8a1f9553080[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fb8be69bd8c1f2576c38b8a1f9553080.exe
Size

48KB
MD5

fb8be69bd8c1f2576c38b8a1f9553080
SHA1

09bc7a7baffc3c77fb9ac6d6f8c3f481b5c21221
SHA256

30a8bbe1bc91c2faf0e1a5eb59be9f18321e836d8b243ffc7d11420306b7e600
SHA512

7d3ad221a6f5794a3fc7e9283a06b7c0190d8b085ced053bc15f5c1756c359e80b0b259bf53350a54654eb1306211cfe61db8cc5b784cfccbfbeade03067ba95
SSDEEP

768:V6LsoEEeegiZPvEhHSG+gDYQtOOtEvwDpjeJQ7suIlsw92KFXpQenhr:V6QFElP6n+gMQMOtEvwDpjeJQ7pojk4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fb8be69bd8c1f2576c38b8a1f9553080.exe

Files

NEAS.fb8be69bd8c1f2576c38b8a1f9553080.exe
.exe windows:5 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 536B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ