NEAS[.]4fff50ab8d75a2834b631d83b2e626a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4fff50ab8d75a2834b631d83b2e626a0.exe
Size

141KB
MD5

4fff50ab8d75a2834b631d83b2e626a0
SHA1

4243a4d7dddd76d18cd194b785f7d1c53e1ec560
SHA256

023f9198d45c8145a0de7797d153ee564f17e222c53dfe3308bb4e35f74327f8
SHA512

be6cad03d7d02de5303cf68a7e59608223a9a1103a0ec947e55d09bd44aaa7f5796572a5dd0ce6385dcfcd419d064a62c5ab904f7cb7f59cdc16d0a1f6faf936
SSDEEP

3072:RGmRmNJToTJfp2D1QzpSyiJEkGSPf1bc4lC:RGMmfToTJY6zpSyvkGSn1tlC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4fff50ab8d75a2834b631d83b2e626a0.exe

Files

NEAS.4fff50ab8d75a2834b631d83b2e626a0.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

Compliance

Sections

.vivi
Size: - Virtual size: 160KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uiui
Size: 134KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.po
Size: 512B - Virtual size: 520B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE