NEAS[.]f4634ff6d4953275af1c408cf897e420[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f4634ff6d4953275af1c408cf897e420.exe
Size

184KB
MD5

f4634ff6d4953275af1c408cf897e420
SHA1

a30fd248e56d15c57aaa32d6c099156984637642
SHA256

ef15fee16bf0ba14963cab22d39035f3c19a46b1a5d353897e9ed330faf9e8ab
SHA512

2b40fdf4a313cf0aa04653034f4c005bb01a3a912396d1bfddc37053d5dbbebbb207b8b9ec6b8f90a8d6f7e6512a56d2a1912c5402f16e35543911c1f04a37a8
SSDEEP

3072:L1CwLHKiDZQwzU+Wz+ndF8VnBM+9M4fMxYKoEOq2snuCfIxmwNVyosE:Lsw/pzFEjjM4MxvlOyuMUN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f4634ff6d4953275af1c408cf897e420.exe

Files

NEAS.f4634ff6d4953275af1c408cf897e420.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 6KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 166KB - Virtual size: 204KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.de
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.le
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hp
Size: 27B - Virtual size: 27B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ