NEAS[.]74add237d128d3e850661152b35d3880[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.74add237d128d3e850661152b35d3880.exe
Size

511KB
MD5

74add237d128d3e850661152b35d3880
SHA1

728d9dd942a85b89486d11282a0f251683f7d375
SHA256

22c5092060a6d2db3ece40a3a7c37df71eb8a1a2bc77f71a2611726834fd4297
SHA512

4b4400c7997d128ded89e39b22d0c59a64689ac2b6d257bc5593212ce6a69bbea129ecad6b856077d2f5ad71d140cbf8beec425d406cf54089a3125409ccde77
SSDEEP

12288:H1/aGLDCMNpNAkoSzZWD8ayX2MQCw7D0P+CLLsIT9ZiHejPhJKEH6:H1/aGLDCM4D8ayGMDhvlJ/a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.74add237d128d3e850661152b35d3880.exe

Files

NEAS.74add237d128d3e850661152b35d3880.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 240KB - Virtual size: 239KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 18KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE