NEAS[.]fd816ceb1936148194af9096b42455d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fd816ceb1936148194af9096b42455d0.exe
Size

392KB
MD5

fd816ceb1936148194af9096b42455d0
SHA1

c5f9d112c80f868f81f76f456f331ad071f1d375
SHA256

4b4383732ec7de96b9b4695e7b0c9189e6672f95b7298c6fd82c5f9ed2b37b32
SHA512

9a9795c625632b60370fd6b95b416dd69f28688deb40e2c0552c9d1d6d75c29879b7ad2aa1507296abe62a962875aaa3ed0b6f3aaf651d07c1d3955bbdeaf4b8
SSDEEP

12288:+20eJkQr2mcjgeMXNOA9EZrcuW77Q9hB/wB:aeCQ/qMX/9ETW77kh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fd816ceb1936148194af9096b42455d0.exe

Files

NEAS.fd816ceb1936148194af9096b42455d0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ