NEAS[.]5691e467feaab17d5643617e1063dc20[.]exe | Triage

Sharing

General

Target

NEAS.5691e467feaab17d5643617e1063dc20.exe
Size

204KB
MD5

5691e467feaab17d5643617e1063dc20
SHA1

b227bfbeabbbb81f6966933c427bc70ecc951b8d
SHA256

3fd5d3f31357295c5d1f367b9f229d4b634a9535634b7ba0e0926d85099913dc
SHA512

4fa15aa22f27dfd8c54b000a6e883d7f7236f9952c8b92630ca1a3e4fd51ebe7514aa177323a31ba8b74d393a03619de196730b7df620dd01a8cbc77d6f4859b
SSDEEP

768:zm0PkFaP+HUNHBoAhSyxt9GNFNCm2PeMTyq8e2y:60y/07zSYeNSXV2y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5691e467feaab17d5643617e1063dc20.exe

Files

NEAS.5691e467feaab17d5643617e1063dc20.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kofbl
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE