NEAS[.]1321cc0620394f87782c4de78ac0a2f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1321cc0620394f87782c4de78ac0a2f0.exe
Size

290KB
MD5

1321cc0620394f87782c4de78ac0a2f0
SHA1

f0e3e64bfb6ebcd248640039f09550627a196397
SHA256

0ad46b6d4a6647d3220093c979ddb0fbb33a495b182bb2b63390ab4af5c9ab41
SHA512

f7623d45bdbb3caa54780ee2dfdc93d92e3101a22afd3539080fc63b5b5341af3b831eee59f0b1967d3dad35e5c09fc7630f3e1cf2dd2a153bf46a78628584a1
SSDEEP

6144:w731bdBaBBrSqmedD5PQxQRp3awbAS5T2YZN4uMDjanko:i1b8rzJ5oxe3rskmHjako

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1321cc0620394f87782c4de78ac0a2f0.exe

Files

NEAS.1321cc0620394f87782c4de78ac0a2f0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ