NEAS[.]49f578c04e501068b0f04c8820309480[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.49f578c04e501068b0f04c8820309480.exe
Size

340KB
MD5

49f578c04e501068b0f04c8820309480
SHA1

1f5767b1d01eae694e917b628f7632e621bf8cb9
SHA256

d14030b0448a3e57a5fbcd1b0d850a7a0b989693634c2f0ae8fd436cff4d9bc3
SHA512

d02853f7b9cd80ddc581572e4db71e7aaae4c9d12c54d4f56817a0ab2e5e4f2184bf80ab1d12c495ab94abd3f8e54801b1fde3e3292f5d194eae49978bc40e25
SSDEEP

6144:Q/5geibQtQpHXPoBQfFMXN5++tNP28YkK4XnmLVRigcxkQXUyfRZJtF:QRgeib8QRoiaX2+yRk0igMkQXUQZJf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.49f578c04e501068b0f04c8820309480.exe

Files

NEAS.49f578c04e501068b0f04c8820309480.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

bAMsJ4T1
Size: - Virtual size: 586KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

2OPLzPVG
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

M1rQsmtC
Size: 316KB - Virtual size: 316KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

4TJw1sTg
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

MiMY1Rum
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ