NEAS[.]1f84bfd518bd1e6e2fc7b44103ae1561[.]exe | Triage

Sharing

General

Target

NEAS.1f84bfd518bd1e6e2fc7b44103ae1561.exe
Size

136KB
MD5

1f84bfd518bd1e6e2fc7b44103ae1561
SHA1

379e980cd31ed3fab81e7c8bc0cdf6103274626f
SHA256

7e39581432c2f1eb78da558dedcfb6764dcbb7455bae90fd374d35276fafb7a8
SHA512

9540b33460e1ad219155d526ea91fecebd2b427e70a7ae8449ba13ecf8d8eeaa94767308deba91300873fb042fc7cd9f8d272389804e447be5a0904121b424a0
SSDEEP

3072:HbRBxl5NBkrmK6xI2NvGcSX+apb4yzjRbaA:nxl5NSzcvwXBzN/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1f84bfd518bd1e6e2fc7b44103ae1561.exe

Files

NEAS.1f84bfd518bd1e6e2fc7b44103ae1561.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ