NEAS[.]f8c91d158982f5658f92d2f1278c4100[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f8c91d158982f5658f92d2f1278c4100.exe
Size

311KB
MD5

f8c91d158982f5658f92d2f1278c4100
SHA1

2cb4b81325835dad41694b092ebca182187f4189
SHA256

801df52d39976d45fa388eef296221f594643192eb334bb0efd7a0c3218880a9
SHA512

31d96008c4a3bc87fda0c31b1cd6341207dcd43439c68432e697245c6aee38b9ccf86e7bc2c11870f153ad5f00b23916f8d3f5ac538a15d8d04da779edf3bf19
SSDEEP

6144:SY+32WWluqvHpVmXWEjFJRWci+WUd20rUU5EYCTvaBju4C:BnWwvHpVmXpjJIUd2cUusvalxC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f8c91d158982f5658f92d2f1278c4100.exe

Files

NEAS.f8c91d158982f5658f92d2f1278c4100.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

HSP0
Size: 176KB - Virtual size: 176KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

HSP1
Size: 123KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE