NEAS[.]f78134f3a7ec5ea0d37b8b41e0e8ca00[.]exe | Triage

Sharing

General

Target

NEAS.f78134f3a7ec5ea0d37b8b41e0e8ca00.exe
Size

386KB
MD5

f78134f3a7ec5ea0d37b8b41e0e8ca00
SHA1

4cc932148a80621af14ff3576119d745c9b8e48d
SHA256

1a9c6fb2d281097f8956e60bc7893368881a42c1805c2228ae61fa2e8aaa7f31
SHA512

63e6b544f8c4dafc4bcdf4eb3944387ef7a73c6cc84f135d8e99e7223601c839cc38277dc2875ca146ce17d925756c3e842389705c2a8b2040c45ef7ffaaeabe
SSDEEP

6144:SejsEZ536R9stChkP7vYyuZ8dOtnGQbzlX6yKRmvHMxnGNB:SeAO53O3WR1donG2zVHKRbgB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f78134f3a7ec5ea0d37b8b41e0e8ca00.exe

Files

NEAS.f78134f3a7ec5ea0d37b8b41e0e8ca00.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 352KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 6KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ