NEAS[.]12bed686718efb1b20f1e8f9b8e84220[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.12bed686718efb1b20f1e8f9b8e84220.exe
Size

472KB
MD5

12bed686718efb1b20f1e8f9b8e84220
SHA1

25fd1145c976767b9c67909158d679718a47f386
SHA256

1691b4d6bdb216a9eac1e58499761d89ef5e8bbbb5687a496e2af056c1f598b0
SHA512

b55adbaedd365b52872e213fcdd4df06ff3f266af2b7cb1b2e665fd4502977837faffdf024dc3ea42b9c4d3f8cd7f7ef8d3f48d4e88aa985378860dfbaef7cf9
SSDEEP

3072:OV58RinudiP52xx67lLd/iHDoNVfVv2hfI7EfzvbLyKqQaEGMM:OskgiPA6RtPNdkfsE7obF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.12bed686718efb1b20f1e8f9b8e84220.exe

Files

NEAS.12bed686718efb1b20f1e8f9b8e84220.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ