NEAS[.]d04a10c19369ffe5c81e417487fec5a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d04a10c19369ffe5c81e417487fec5a0.exe
Size

281KB
MD5

d04a10c19369ffe5c81e417487fec5a0
SHA1

371e9de6b48ad68c649a446a2d1e6b042a5a28dc
SHA256

c6a12ab4af0fdd98643ecb3eead2803c49dee7f772b1478e08e65fe4d1d53d3f
SHA512

034dcd6f7b1104fa4af7481917d2d8d11c6f486760495b1414f532cc34501553d927bd2aa9f954fa3f1b232149b4074fe6ab868e30800f2943ccf17b4d3867fa
SSDEEP

6144:WCc/mzuBgkjWVSZctL3B8D6ltQ+eMzNXVDVF8HA9I7cs4ZTdsjZ0f/SMYK5XAsEH:VuPcEDadR9jW0I7YOMd5Qh96RYdx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d04a10c19369ffe5c81e417487fec5a0.exe

Files

NEAS.d04a10c19369ffe5c81e417487fec5a0.exe
.exe windows:4 windows x64

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 265KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE