NEAS[.]c6bfc24f677648eada60abc279af3a20[.]exe | Triage

Sharing

General

Target

NEAS.c6bfc24f677648eada60abc279af3a20.exe
Size

35KB
MD5

c6bfc24f677648eada60abc279af3a20
SHA1

4ca4fd72982a5a40155a7d0e3abf698618b0f6f9
SHA256

89d026f39e77e80981087c32be895a0571a47ca0b466164b03cda911ec8b6ebc
SHA512

d21bada4f53fbcd917d734c17c2f2891dd64f18d763f7efed4a7cade9693aece612c7ddba94ce9f2e6e1015b984d8a2f22314d7f8f2dd18fddf2b910f59b8271
SSDEEP

768:9qSqC8+N5ozQQRncwxWmNXMX3cX8tcXmcX8/XrX8/urgPS:9rqfzQQRamN88xjm7cgAS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c6bfc24f677648eada60abc279af3a20.exe

Files

NEAS.c6bfc24f677648eada60abc279af3a20.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 11KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 14KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

mdwexvv
Size: - Virtual size: 140KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

petite
Size: 274B - Virtual size: 274B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ