NEAS[.]58d881b80fa1fc9c1789c09cbe2e7d80[.]exe | Triage

Sharing

General

Target

NEAS.58d881b80fa1fc9c1789c09cbe2e7d80.exe
Size

208KB
MD5

58d881b80fa1fc9c1789c09cbe2e7d80
SHA1

f51ba2c402cc5e823b2fcb24b810950c160cb923
SHA256

6ff301e1754fe89afffb4dd065b3f2e1fe401037a7cb33450a6006d3aef9b85d
SHA512

ad45b5f73aa581041344ea00973bc9f329275d093aa8cd15e55c77eb1442a674a5e89cb1d54b9dd1ca7c8055b133d5af7ebad141c01e927b0d34c11ff215c79f
SSDEEP

768:TpMeEXxR3F8UNvrJb0PztsYDpVLGc3HZWok/6pSy8kIyvrT/1H5EXdnh:TqzXF8CvrJ4PBhDP35R8mhI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.58d881b80fa1fc9c1789c09cbe2e7d80.exe

Files

NEAS.58d881b80fa1fc9c1789c09cbe2e7d80.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfcd
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE