NEAS[.]e6df4a65f4a0cd9a80944383ed8be2a0[.]exe | Triage

Sharing

General

Target

NEAS.e6df4a65f4a0cd9a80944383ed8be2a0.exe
Size

847KB
MD5

e6df4a65f4a0cd9a80944383ed8be2a0
SHA1

ed8335e6db5c7cd19df61bd1ec7ee120477d7ab4
SHA256

3677fc5ac139e8768442be98dd731cdedbf41f36b1089cc6d03b4a528e9b89db
SHA512

7166ce17155b389a4bf6c1e67b057023b6aaac56a3cabd96bfc1792d0a18d37af82fe8b9f8654b573a094dc1f9357cc2f351bd783b05e07c96225520696c8b4b
SSDEEP

12288:M55555lvlsync+Tf0nm6SQNGMnvT4aHfeR:M55555Lsync+Tf0nNGMnbZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e6df4a65f4a0cd9a80944383ed8be2a0.exe

Files

NEAS.e6df4a65f4a0cd9a80944383ed8be2a0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 496B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE