NEAS[.]d8502a1356942d9880fc33288f7ba6e0[.]exe | Triage

Sharing

General

Target

NEAS.d8502a1356942d9880fc33288f7ba6e0.exe
Size

212KB
MD5

d8502a1356942d9880fc33288f7ba6e0
SHA1

aaecabc826699aa1b479815134c0d007d5b1461e
SHA256

fd634fd7777aca809bf78bbd4110dc99fa9dca4292665e101e83422b49f65461
SHA512

d6c3310e2e083908b41325296b58f2e778e249f85d9158ebccfad6668dbd7a43268e3a820c9e9226b9404a247b1422d4628310ce2a300c0dcda9495570208796
SSDEEP

1536:13apwXo6snSI7+4TfjBskSx8x35ncc+rpPJrpHFkxgOUR1tR/R:hC6xRyfFP0o35cc+rpvOUztV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d8502a1356942d9880fc33288f7ba6e0.exe

Files

NEAS.d8502a1356942d9880fc33288f7ba6e0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ