NEAS[.]2cf189394565cdbed7c600acfb8ccb60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2cf189394565cdbed7c600acfb8ccb60.exe
Size

154KB
MD5

2cf189394565cdbed7c600acfb8ccb60
SHA1

a8ea1beddd62eceb7b79a7d577c05821a041fbe1
SHA256

5ad3b96bd1b342d03e6a9541e149652bf6f51b719cdc7204fe3a4c36e4200f1c
SHA512

b21159b3f9c6aebff6c117d57f1c0561c6861f4aa07420c0ae141d737d176d7cf0656372ce82a5c825d2c8a17f9965f8d86731edb270a9c087209ec0c4793b2f
SSDEEP

3072:oDBH9p/3K+AEkzgXrGqJM4qd3bGjhkqsXa:29pTAEkz6rGq4Bbq2a

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2cf189394565cdbed7c600acfb8ccb60.exe

Files

NEAS.2cf189394565cdbed7c600acfb8ccb60.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 148KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE