NEAS[.]efbbaa947b36fd08e94bb6ecd0fe7250[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.efbbaa947b36fd08e94bb6ecd0fe7250.exe
Size

74KB
MD5

efbbaa947b36fd08e94bb6ecd0fe7250
SHA1

f13016f1a2f30af5781750053d9abcc8f5aebea7
SHA256

2bfd1cb0f8ef43244232c232ce1f94d25120c17d6aec07c16ef1d44f94be73ae
SHA512

389386c0502d9fcb7d44a70f1f0c245c62d17186521061791b060824b44378646b7e3b8573aa7b26a52dbebbd8726b322eff68070b3f6f3e0c95010aff27cd4f
SSDEEP

768:8DP9YMl1lr2pflfszT5qTqy0BD2NBuCVVTOTO/apvzL3DQMFDDUF8dY6VmrdwLWv:0nzRXd4CD235DV/6dDQqdypwLWY9X3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.efbbaa947b36fd08e94bb6ecd0fe7250.exe

Files

NEAS.efbbaa947b36fd08e94bb6ecd0fe7250.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ