NEAS[.]804db18a9904d7775970064a44716970[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.804db18a9904d7775970064a44716970.exe
Size

82KB
MD5

804db18a9904d7775970064a44716970
SHA1

6c87f7399ea7cc45567d336987e3f1ad2cb63914
SHA256

3f9dbdf538457c9b7009d38aa1a8c3f31536e206d76dfa85a41e7a36dcf25cd5
SHA512

f415c2d83060f25e8c18cc05e78b92cc3b1181a656c102dc73042f4b43233a62d9a1864fd4dfdf0ba7c1b61b6aa5281f7fb6d989f5c7398eacc5609ff468f86e
SSDEEP

1536:OVJ3YAMaOiju/clqYoajx5uETXNvD3Yfc7tux9dIOWr8BcSA8/2/Q1K7t/zDW:OVJ3CaOYu/8q7ayGXt3+Eu6OWuM/Q1w2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.804db18a9904d7775970064a44716970.exe

Files

NEAS.804db18a9904d7775970064a44716970.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 90KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ