NEAS[.]f1ec8daad8923fb1d31d98ae9dda9660[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f1ec8daad8923fb1d31d98ae9dda9660.exe
Size

208KB
MD5

f1ec8daad8923fb1d31d98ae9dda9660
SHA1

5a27b91be03c19b5331373c8847f1930a484655d
SHA256

665c868f2247ddf96f24b11e0aba84d7001786febc64170b7828762c4f79c1e3
SHA512

c3a1f93f0c68e92ae365b3470ad2e5278f164330aa6a0c3c07c9fda18ffc8d379406fb2839b015ed9bc791debf7ce9c61304cbbebcb66cfecf256e80babccf3a
SSDEEP

768:npMeEXxR3F8UNvrJb0PztsYDpVLGc3HZWok/6pSy/kzyMrT/1H5xXdnh:nqzXF8CvrJ4PBhDP35R0Rh9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f1ec8daad8923fb1d31d98ae9dda9660.exe

Files

NEAS.f1ec8daad8923fb1d31d98ae9dda9660.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfcd
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE