NEAS[.]64398e686a6fc9e9dfdf7407f29fee60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.64398e686a6fc9e9dfdf7407f29fee60.exe
Size

44KB
MD5

64398e686a6fc9e9dfdf7407f29fee60
SHA1

e7cf3b50d07236dd11702c370cefd3eb78099cee
SHA256

06e5eddeb438dd383605bd65c243694c9c88f9097d59f3c4b6e5d8191aa14b36
SHA512

a2b9fc5191bc45cc839a701edb85713fd9f3f8f8fa088c132301fd636e99a0aee2d77f3694cff06edf56098e5af8b2a6e2aae6412945c732f578c31e34b0ce90
SSDEEP

96:nPJLPLXfL/7HDvr3zfyuyp81HDvr3/LXgNPfbv2HXfLjPGWbvrNJk3N8wv0T5Dvd:nRV28WmiKTVvf/+04BeUUr90frbNDmH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.64398e686a6fc9e9dfdf7407f29fee60.exe

Files

NEAS.64398e686a6fc9e9dfdf7407f29fee60.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ