NEAS[.]672954e06fd1234baf6aba6139385c40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.672954e06fd1234baf6aba6139385c40.exe
Size

1.4MB
MD5

672954e06fd1234baf6aba6139385c40
SHA1

7279f5768b9bc9a975f7ce5011fa5680da507332
SHA256

ef62e7e9ad3f551e16aaf0dd25a89d52dfb94ff0378767535b4a2f859964f662
SHA512

d155a9d4b8b53ead54b2f2f93eba0c68263e7d6b5c26de296bb02228387611ffac9d337e129841e3efb800d674beff4d26624a5e9af877fe02c1bc30d9abfb06
SSDEEP

24576:UnsJ39LyjbJkQFMhmC+6GD9qLX/JdKphdSYnH7up:UnsHyjtk2MYC5GDILXRdwznHCp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.672954e06fd1234baf6aba6139385c40.exe

Files

NEAS.672954e06fd1234baf6aba6139385c40.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 706KB - Virtual size: 706KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ