NEAS[.]4b3818e0f6af4f67efd0de1a551e2510[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4b3818e0f6af4f67efd0de1a551e2510.exe
Size

128KB
MD5

4b3818e0f6af4f67efd0de1a551e2510
SHA1

7ba771bc9c66eea7c57b69890cdfbdd1591116ae
SHA256

93057f0dc4bfc8187459922b1355d0aa7dab4b07171b88dbb8a0f24920e87d91
SHA512

e077e2343206823dcba0aae331c46c54c28e902087109a8e24538ae552355d4c18a8ac2dc6335bd7bf92be4962c399212792b4e89b2c7063d4479c3c66115244
SSDEEP

768:AflivXrVKpVhKvtxwYHwVFKieMQ5nmucwU:WlqrVKprVo6Q5n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4b3818e0f6af4f67efd0de1a551e2510.exe

Files

NEAS.4b3818e0f6af4f67efd0de1a551e2510.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ytdljcx
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE