NEAS[.]aca70f1d6b8f5f685a6eab871de37850[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.aca70f1d6b8f5f685a6eab871de37850.exe
Size

148KB
MD5

aca70f1d6b8f5f685a6eab871de37850
SHA1

cbebf64a07129de5a8a6c3c4e5b0ef006483bde9
SHA256

5a37a71b185bc40529ba311f0eda79cc7cc3fe038e5ecccc3d616003547652df
SHA512

54ee62781946cd093c8ec1eb8c7d2f3311ac0ef58b6805819509405359a8496e7d5fbe0afb088480f8a3742effbc536e70463228bac73459dc7cda3674da2513
SSDEEP

3072:wCMiqJl3v1SRAsvdhxBz8bNk/AKItB/pL/s9hlSLUFWzk:wCMzfMRvxBIO+XpDnUUzk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.aca70f1d6b8f5f685a6eab871de37850.exe

Files

NEAS.aca70f1d6b8f5f685a6eab871de37850.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 142KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE