NEAS[.]9bf1b5bbd838c68d42e973cff486aa20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9bf1b5bbd838c68d42e973cff486aa20.exe
Size

212KB
MD5

9bf1b5bbd838c68d42e973cff486aa20
SHA1

f6f053e9ebb27cf13d0a20e7bb69378e3247c0c9
SHA256

d8bde2fb66b714af73e523343b646f18d6baadd254d1e9d5ae0dd01283b00bbb
SHA512

0b2b8a057c82763bd9c9b8d61295ef50babdff79a0445a0373936f8ae60ebbf4445b19ef51cc2d44a9867fb6f0fe6bd8e419b35dd467d34658e1e81891ba323c
SSDEEP

1536:4yr9dpPgdAwu4sWvKpKBGZvGyGgJTt7FEw0xhBKrRQQR/R:l/ZgGwu45JwamULhBUeQV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9bf1b5bbd838c68d42e973cff486aa20.exe

Files

NEAS.9bf1b5bbd838c68d42e973cff486aa20.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ