NEAS[.]cdfa2327bc445057b096009b871bccc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cdfa2327bc445057b096009b871bccc0.exe
Size

7.0MB
MD5

cdfa2327bc445057b096009b871bccc0
SHA1

87fba582941c352da2345be302ff4070aeea8dcf
SHA256

2568616e6cd4e400b8893f40aa5147254a8affe5341a7e47cbad5eb21f8faba0
SHA512

a8656a2f86fdc88f210aed443fd02fad2b678e0454e5fa4b0120f2726328aa634d73f983cab240f6ecaf48f9f54b982eda7340fc28ded05aec66c1dc1eb10a82
SSDEEP

12288:/xj4rsvNOOVLB0NFVyz3EzWIlRZSbv6NFWs6B27NqLTCGQf/w0g:/xj4qNOOLss3/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cdfa2327bc445057b096009b871bccc0.exe

Files

NEAS.cdfa2327bc445057b096009b871bccc0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ