NEAS[.]0888e8a16b68a7c3f7a6405aefe2f390[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0888e8a16b68a7c3f7a6405aefe2f390.exe
Size

208KB
MD5

0888e8a16b68a7c3f7a6405aefe2f390
SHA1

4d96f0fc9ec6d6bda89af21017dc33b1aefe461f
SHA256

6519af80ce49331f7241899b01e4a3456301710791f6d5fe145a5c16b3f3e831
SHA512

4b44fbe2d7aae60bbcb293fc32fcc3dd741286456981a2bf3a4658ebf1c3e0c942c7c8c98904dcbb21db6c836b7c0ee0c35642ca2fe1e77f24b0f043048c1f81
SSDEEP

1536:SwfsfOIlSXOTmVMfENYcllQrJa1I4zEWl6jLCKZmO2offLWQ:5fqlSXOiVMfE5llF5zEW/KZmO2ofTWQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0888e8a16b68a7c3f7a6405aefe2f390.exe

Files

NEAS.0888e8a16b68a7c3f7a6405aefe2f390.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ