NEAS[.]32f18f906de66a8831f42ab921414480[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.32f18f906de66a8831f42ab921414480.exe
Size

5.0MB
MD5

32f18f906de66a8831f42ab921414480
SHA1

540fd4a1b538cb4a9a4ca8472321d2f22ba592f6
SHA256

6de7dc28e3f6ded94670e9d1198661b47f24afd4792653b7872938ee8e539457
SHA512

d8f58cf9d7860d4a65d60f1f581365518757fa01526905a6182a3239f1d37a9b49d1684e40d6c5e8406515b3c419b6eff64ed8d443aa3f758758c06ba3ab16e0
SSDEEP

98304:TIBOcLdnIXpEkFaqcxSY6vBVR1s/ryp3QVopMJwiUtgDYXUZS+CGVltX5mCRcxrW:TiOcLBIXpf7WSY6wM3Q3J0xr71FrnBpS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.32f18f906de66a8831f42ab921414480.exe

Files

NEAS.32f18f906de66a8831f42ab921414480.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 605KB - Virtual size: 605KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 185KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma1
Size: 1.4MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE