NEAS[.]1fcd398b306063d10837049e4952ef50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1fcd398b306063d10837049e4952ef50.exe
Size

208KB
MD5

1fcd398b306063d10837049e4952ef50
SHA1

aee02bf65e21ef121687fd367de6441de972b961
SHA256

4702409e87e135824d171f19871981ab39864da4c836e69ce396eb3175675678
SHA512

a8a970daa52a410299c436c34adcb81e3d1fe942d2315f97cf645bbea42cc08e91fa9dbdf0b6a158d32541f6fd39bbed599d3a3722a9806b340397b7fd88955f
SSDEEP

768:TpMeEXxR3F8UNvrJb0PztsYDpVLGc3HZWok/6pSyIkPy3rT/1H5NXdnh:TqzXF8CvrJ4PBhDP35R/6hZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1fcd398b306063d10837049e4952ef50.exe

Files

NEAS.1fcd398b306063d10837049e4952ef50.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfcd
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE