NEAS[.]4e5b7faa7902bf48af4147f5c4234b20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4e5b7faa7902bf48af4147f5c4234b20.exe
Size

216KB
MD5

4e5b7faa7902bf48af4147f5c4234b20
SHA1

ae989a6ca5a47aa0adaa2d0400c03bd1685ec610
SHA256

0ef4284992437b935a409b73efd2317041f5b7b360190df326c97ebc6c3f21b9
SHA512

16f539f875773412b6ea8db0814e998b9831cff4d296f468820c0d909eb0af3f1ecfe80f37d46139a75b64eca35864eb802d62c4951a7781f1d628f3a58ab274
SSDEEP

3072:SPUHpiKT2t2UHIu05W7SAFJJOUD9cckiKop97f3r8n9t9Ygntw9F:/rTfUHeeSKOS9ccFKk3Y9t9YZ9F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4e5b7faa7902bf48af4147f5c4234b20.exe

Files

NEAS.4e5b7faa7902bf48af4147f5c4234b20.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

FKP0
Size: - Virtual size: 18.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

FKP1
Size: 203KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE