NEAS[.]d5042839c075778ff2ba37b78dc99f40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d5042839c075778ff2ba37b78dc99f40.exe
Size

74KB
MD5

d5042839c075778ff2ba37b78dc99f40
SHA1

7761e2ef9c7dc272641a63accac312040f6648e4
SHA256

d144fb76816fc07598c30d4d38d988eaa93f22bffbba21e1739cc3ed28fdf712
SHA512

1995d36a618997be1c998dadfbca515c1d283f1d9d9d7acf188831c45f7a122aac7b3acce9f75fc5221e729bed162922657c0d37ae5abd97821e5f8516e46dae
SSDEEP

1536:xv0+6LuyBwvtQSDjkyN4hk2ku9D6JS2DDbEF4:xviLqQIGxku9v2C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d5042839c075778ff2ba37b78dc99f40.exe

Files

NEAS.d5042839c075778ff2ba37b78dc99f40.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ