NEAS[.]af854e886388a131521c13014256e560[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.af854e886388a131521c13014256e560.exe
Size

147KB
MD5

af854e886388a131521c13014256e560
SHA1

160f7afd1524e4f146d9ba8948209754307c13bc
SHA256

1bf9ced6fbbb269a422dd64576193828f7a25c0e3f320ef82efd2a1a391410f6
SHA512

25256358bbcff050a01566b34cb1c085a78253a128e02f8d687881d624d86faff43e71fb2103a667e57f82d9dc7732cc41470eae0f5d4068ec59d13c97d44938
SSDEEP

1536:oWwaMcKOER0m9mwW/dcAggupnhycpDnq+5h/tDSZ15WwdGf:pzKR0xwW/DWnhFpDRzSZaCGf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.af854e886388a131521c13014256e560.exe

Files

NEAS.af854e886388a131521c13014256e560.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

MEW
Size: 100KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

�uۊ��
Size: 43KB - Virtual size: 100KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE