NEAS[.]1f311fb08b02de4ac5716254d653d770[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1f311fb08b02de4ac5716254d653d770.exe
Size

8KB
MD5

1f311fb08b02de4ac5716254d653d770
SHA1

a8745adc77eedf03c2217f13ce4bbc9f847989f1
SHA256

4229f1675627e2b21bbbdba9fab3cb7e8addad3d354793ea89776998a512c5e8
SHA512

d85da1deba576d646ea8f8ec04b2d85838d720e46755f8e8c4d249ce62b2480efc03f025a871b02ce7fcf1c758ebbf91a5f86a36421920f4ad0294a578c86f59
SSDEEP

192:Op/uwb0Z3ITpbXluQprWx72A1mTZYhCxbP3jXOWh7:ONXIZsp7Dpo2KUlRrXO47

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1f311fb08b02de4ac5716254d653d770.exe

Files

NEAS.1f311fb08b02de4ac5716254d653d770.exe
.exe windows:6 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 215KB - Virtual size: 215KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE