NEAS[.]1df13eaf74df0be144c2cf5ac7cf4f20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1df13eaf74df0be144c2cf5ac7cf4f20.exe
Size

1.0MB
MD5

1df13eaf74df0be144c2cf5ac7cf4f20
SHA1

c74a2cc9dfea3de591d81894c001ffbfabe121ec
SHA256

b75513cd7ef7561154dae8c1c647e68b846238a25fd3a1e5466743d13e562b2b
SHA512

f69f6d25622e6b99e885186e901cea6244cd9f12e29fd854928020010857dbeed21b8152193959ff673ae53a7a013b44f7dec58c8cc2a5023dba4132b697a12c
SSDEEP

12288:rb0+sqCE6yy4bmhSd+1YCJUMEyD4wJQXrDMvkFHuy83402I:AjE6+bhi+MBQ7DMkHWp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1df13eaf74df0be144c2cf5ac7cf4f20.exe

Files

NEAS.1df13eaf74df0be144c2cf5ac7cf4f20.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 768KB - Virtual size: 766KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 68KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ