NEAS[.]ac506abb1b82612679e592ca3a5f1c20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ac506abb1b82612679e592ca3a5f1c20.exe
Size

289KB
MD5

ac506abb1b82612679e592ca3a5f1c20
SHA1

62a2dd8c472d6dce8776907d35c5c72c0b696dfb
SHA256

78fd231e22f61dd860c09d53248ea7cb928de79da35d44b67e97f69c103603d8
SHA512

6457121a0a480c4c6658bfc687413852c30cf802bfb7720f8e4e3d6bce9e6d75289b7ac1e0f0d8d907693dfb7783ec60797b49de06ae05dc5f6c9b6bf15171f6
SSDEEP

3072:zooQ0Rztx0KbHtzpE8f/ig5/V/xyjREGMf4pLthECQT68VMJLaQljVvzUpz:fNHf6g/CR18kECzJLaQVbU5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ac506abb1b82612679e592ca3a5f1c20.exe

Files

NEAS.ac506abb1b82612679e592ca3a5f1c20.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 144KB - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 32KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ