NEAS[.]00937cdfa66008616633170c91021580[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.00937cdfa66008616633170c91021580.exe
Size

260KB
MD5

00937cdfa66008616633170c91021580
SHA1

8d2b39a0b8ff4059170730ab33b9417357edc4e1
SHA256

76af331a04cbff046548dd46e8f382275fc803fcf4cd3dbcb3071e418b2513eb
SHA512

dd2bb9a87da0b571289030b826c90859697ffc80adfaddacfd3b879fab6ef49d37341136d55976c0e3e310d52ec0c83c0f5017f71c98c1ce5bb21001a8d2d67b
SSDEEP

6144:RnxIZhKp1cFpheHlwjx3+T8a4gHs1ETjnrMN:RxIZhKp1YphKS3a8lgHs+jrMN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00937cdfa66008616633170c91021580.exe

Files

NEAS.00937cdfa66008616633170c91021580.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 77KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qnk
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE