NEAS[.]f267058651f617cd4c87ab633f788970[.]exe | Triage

Sharing

General

Target

NEAS.f267058651f617cd4c87ab633f788970.exe
Size

14KB
MD5

f267058651f617cd4c87ab633f788970
SHA1

f0f8a88d0bd08dff9514f68d26905041fdac11bb
SHA256

c7509b0812b5eaf53dc64e89a3fe28c63cb0e61ad98bbfa5b90d6aa679e7271e
SHA512

06628f70c456cf6c2d096ddd50dee1f5b72a4696eaf15d1e5703c92f1fb29610040a5067d6c8c73dca10ff4d6ad046cacdcb8e2267711fc2103d2cfc5adafdca
SSDEEP

192:nehHSn95v5ZEAyIjp1sN/8yB09dQcl0SMdIfQjcWOu7Vu:UezhZEAyI91y8yu9pl0SMIAz/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f267058651f617cd4c87ab633f788970.exe

Files

NEAS.f267058651f617cd4c87ab633f788970.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 176B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 834B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ