NEAS[.]6efab9fb2496951404d081ec282ce190[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6efab9fb2496951404d081ec282ce190.exe
Size

1.4MB
MD5

6efab9fb2496951404d081ec282ce190
SHA1

fc8720d2488b4a0a4d823553fdf5c9cf8311945a
SHA256

2c0898d0204ba03bbb5ffa5c4ff7315204280e9e6cb234c4b505cb0f2b3f21fa
SHA512

24ea0984dead8feae1487ee75af519522e7f88184717a965189cd40cd58b814fc712bb403d7eee5c401794bd8f6eb1b30ab6038645ad3da1630a89fff1c5d788
SSDEEP

24576:uwCw7ts7+1Fe8yuUbpN1PvJBktE8hDvaTyXEg1ocXo2ymM1aXv3dQrLacgto:uwCmtf6fbpDhUWTyUHU7yTs/3dUGZto

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6efab9fb2496951404d081ec282ce190.exe

Files

NEAS.6efab9fb2496951404d081ec282ce190.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.textbss
Size: - Virtual size: 185KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ