NEAS[.]ad738962e0e641212c8f3d6022684aa0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ad738962e0e641212c8f3d6022684aa0.exe
Size

48KB
MD5

ad738962e0e641212c8f3d6022684aa0
SHA1

02890e16bf419ee2f6999655c52e1e85ac417ba7
SHA256

8bc22062a6b5ae9f9ff7912c0dcc3661dac4bce86b5eb64421238149d2345763
SHA512

08ac2b949de51b842a2a998ba2be487080a70baed62b1c5f59245cf9a90b56c56c9abe52b889c49752510148043d0278fb365ca6436911c27f0450faa3d654dc
SSDEEP

192:RDMAe4Ckj19RZZ6wpSfu1bKcq5uHj7khBDSeKNH47KEEBUbOGr6kxiY:RDMAoKz6WtKEj7aBDiMEurAY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ad738962e0e641212c8f3d6022684aa0.exe

Files

NEAS.ad738962e0e641212c8f3d6022684aa0.exe
.exe windows:4 windows x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE