NEAS[.]12e10b0ec590154c9af8a516f0c86e10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.12e10b0ec590154c9af8a516f0c86e10.exe
Size

81KB
MD5

12e10b0ec590154c9af8a516f0c86e10
SHA1

efacd0b5eaa47e08561629997de24c09d88af197
SHA256

85ff1d3d00311b1036500fe816fb936f9a6be7ae91b96e1fad3e625e5cc02cbf
SHA512

5f063220ed71c4561f5481917c7b3098c11cfaf429381d9dddab941f6d97559552f475e62d61067ac06c10dd9816050079a4b09da61440665410b845b6ad55c9
SSDEEP

768:9pQNwC3BESe4Vqth+0V5vKmyLylze70wi3BEmh:XeT7BVwxfvEFwjRh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.12e10b0ec590154c9af8a516f0c86e10.exe

Files

NEAS.12e10b0ec590154c9af8a516f0c86e10.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

gumrkvc
Size: 41KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 15KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE