NEAS[.]9965b0559f697d64378dab8703be5400[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9965b0559f697d64378dab8703be5400.exe
Size

312KB
MD5

9965b0559f697d64378dab8703be5400
SHA1

b3feff935688937f6660e7c31e920310afb84d73
SHA256

d015fc86bc6a9a3c37102d597e1418ffa638b599afa34dc5d1f07285ef3c02c0
SHA512

6d922ee0f6e441039c210c75671ed21d63719783fea4023e9f7d4c0e8bf77ce9ad52e3c99366e14e63736f103c9534aeb4fd7989d9b68d968fdb12a1c1d71c3b
SSDEEP

6144:bCTpTBoW7GG84Rp08YQJyCvDQRMANe+qOgFK7PluteD1hov//:ETBJrAQJysn5+qM731qX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9965b0559f697d64378dab8703be5400.exe

Files

NEAS.9965b0559f697d64378dab8703be5400.exe
.exe windows:4 windows x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE