NEAS[.]74f62c6d1d4b1a47f803abf86c1eb580[.]exe | Triage

Sharing

General

Target

NEAS.74f62c6d1d4b1a47f803abf86c1eb580.exe
Size

454KB
MD5

74f62c6d1d4b1a47f803abf86c1eb580
SHA1

958a6006724112996b3e78111ba0a146e53c6cdc
SHA256

cec81ddfc272622a6be76d9b9cfbe741061dffb5ea68376c153a3b9678adb407
SHA512

7a1587e115bebb35a914881d4b485a752928ac6d4bd564cbef21cf7e92a27dd0a2908f1b78e4e4f82748c473fc4ed5bbc73695fc8804243e55db98a730a68a47
SSDEEP

6144:p731bdBaBoqNRYEqbxox9xDRQ4GnLU1OUilNYdyEsQy0DQOdhifJbYEqcRrZ/6lo:p1bmJx3W4OwilNYd40Me4flBzgbd2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.74f62c6d1d4b1a47f803abf86c1eb580.exe

Files

NEAS.74f62c6d1d4b1a47f803abf86c1eb580.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ