NEAS[.]b95a92169e38aeffa08651173a4e2240[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b95a92169e38aeffa08651173a4e2240.exe
Size

204KB
MD5

b95a92169e38aeffa08651173a4e2240
SHA1

0f9f56f99878735fb1c8ca48ffda80bd43c8ec14
SHA256

3194e9bddf57411f5c1f4d46ca66fa40596bda56c1f076c282eff55b90ba2065
SHA512

0c89fd5fd2b48357d65ca37c724c5def566435b3d23bdc4871ba25df556c00ba358f2d055f43bfeba31d6c282f2f9ab86591fcc26b257a8fb846fbe3e6b9d8ec
SSDEEP

1536:sFYSIq/y1/b23aPiV8Mql/8HzJ6bn3OgzA:sUqqPOaiJGn3OQA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b95a92169e38aeffa08651173a4e2240.exe

Files

NEAS.b95a92169e38aeffa08651173a4e2240.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fldo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE