NEAS[.]48666f490d2881d86bc7f8f8ecd39620[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.48666f490d2881d86bc7f8f8ecd39620.exe
Size

208KB
MD5

48666f490d2881d86bc7f8f8ecd39620
SHA1

3394e4c1b901c4f258066b254f1246282c8e2755
SHA256

1d01824be8aea478fb25d8742d763973b63ced9416c5ac2cbfba1ae1c6399c92
SHA512

16cddd03d504cfb14cf820d98dfedf232010edf6320407cf565216b3694aa5c26cd0cd14429ba234ea77ff333fa079e891abcd30fc1bf1134e50c41412c5ac91
SSDEEP

1536:I8uTCLxPETQ87OsqTrg2bfbq5dtFLOF88yJXF9IrhSFkim:IfutcHX2vbjUlFFkim

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.48666f490d2881d86bc7f8f8ecd39620.exe

Files

NEAS.48666f490d2881d86bc7f8f8ecd39620.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ