NEAS[.]999ff9c5430ecc30280e0f54e160dc20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.999ff9c5430ecc30280e0f54e160dc20.exe
Size

188KB
MD5

999ff9c5430ecc30280e0f54e160dc20
SHA1

8d8ab7ef963709267c30f6bd1d808ba2dc9f36e4
SHA256

bc63efb418d0fee75fca9c06fc2ea96aea8c2d74677a8b48ccbedffac1aee308
SHA512

d625aff89da9948b0fc30142cdc61c229f2b36058b334fcffa88eb76f28524b6a18e715347cdb960035a792d288acc8ed5b74044c3e955f53a8b9fab0a51bbaa
SSDEEP

768:klJDsZcmlhu0efJBbBosBm1YRQzW4FSR6IQDPgcZno/1H5:01c0pOsBcaRYDLu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.999ff9c5430ecc30280e0f54e160dc20.exe

Files

NEAS.999ff9c5430ecc30280e0f54e160dc20.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.embm
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ