NEAS[.]1f56bc28d4a071b3270a4e8c6e7f4f60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1f56bc28d4a071b3270a4e8c6e7f4f60.exe
Size

91KB
MD5

1f56bc28d4a071b3270a4e8c6e7f4f60
SHA1

75d640e95d96f6dd2fcd3ed21fe85a8250a1a51b
SHA256

4fe1c3fd84093a20f5919c6e9838b10d2c387fb8f82bae15df672bd159564e2e
SHA512

ba89643ca71f13923096eb1ed90912cb1e652ae4d8d231bd3fcacafbfbdd6ab42b10a6bb6268f009bf85808c1144361c31199fd8ac3d859966e1fec5efab0613
SSDEEP

1536:mEfwdXvzFn3aUF1GnZKKHP+ieAmP44r6jPSoMEPx5I7UqXKmAspA+fSGUtokkd2:1fwxvJ3aUF1GnfMt0PSCj7qamdpsGUtG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1f56bc28d4a071b3270a4e8c6e7f4f60.exe

Files

NEAS.1f56bc28d4a071b3270a4e8c6e7f4f60.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 90KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ