NEAS[.]690c1960dc68ed15eb1f6935e135bfc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.690c1960dc68ed15eb1f6935e135bfc0.exe
Size

117KB
MD5

690c1960dc68ed15eb1f6935e135bfc0
SHA1

9e84c86ded9895a658d2265fae774c94aaf497d0
SHA256

5decf21316020a5222b8d99c40c40e03229f95b19096fb02dcef806397c2d8a5
SHA512

4751b607db009646db6273189945ec377fc2fcd4bcae06f2149bc484c6fad334891ea190ad0d42780a0a1af6fc238f1053142b65fb5b6a5a4eaef185fa60d5a4
SSDEEP

3072:KwajdDgbjTK3/tNLsZy+orlWnfvj+4MVFFFbrG:Kl20tNvZlWnfadG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.690c1960dc68ed15eb1f6935e135bfc0.exe

Files

NEAS.690c1960dc68ed15eb1f6935e135bfc0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.gtide
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 385B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gdata
Size: 512B - Virtual size: 415B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gidata
Size: 512B - Virtual size: 320B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ