NEAS[.]5b4a6971ad4f0d1bfb0f2713d80ab640[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5b4a6971ad4f0d1bfb0f2713d80ab640.exe
Size

212KB
MD5

5b4a6971ad4f0d1bfb0f2713d80ab640
SHA1

5f709ba949b56ec717ebddf1b1e5fe8c81cb927c
SHA256

d594f26271871d28acff0a366e913d6d390f4a4d687f19043c37bd6906203ff6
SHA512

518b6801326cca15f4ae9009c92d584c86d31410ae3159142cbf4ebef8e51be8d6f98d1781de595928efe2d0f8a7f7d9db551dc85cf7622047c57577fd3ad1c6
SSDEEP

768:rDApAJmxwUh6zO5g7Wfb8BvTRbdUE6Sijv7xCIs2nAjX/1H5TXdnhg20a0kXdnh9:HsASwKScoNSLDhsms9/H1jubo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5b4a6971ad4f0d1bfb0f2713d80ab640.exe

Files

NEAS.5b4a6971ad4f0d1bfb0f2713d80ab640.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vryeypb
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fldo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbs
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE