NEAS[.]626f8b37294e0f7334fa7c6c69a8f1b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.626f8b37294e0f7334fa7c6c69a8f1b0.exe
Size

156KB
MD5

626f8b37294e0f7334fa7c6c69a8f1b0
SHA1

733db0baa9ae2d5f7a8bd776d30a7f81f83172be
SHA256

aba11a1b3ce29638b58771fa45c98af2406d6091051d4f05438ab769a7c4315f
SHA512

ae8fd75a262c13b8fcf267d7acfe8309b5a77de8f626f598796314374d9d5e3badba284b30541733922def31fd2b3e9e1a173e7090b3e3acfcbc909438c7d7c0
SSDEEP

3072:hs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/C/FnncrI5971cP:hDeM7iNEkgiOb31k1ECUJP5Jy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.626f8b37294e0f7334fa7c6c69a8f1b0.exe

Files

NEAS.626f8b37294e0f7334fa7c6c69a8f1b0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 312B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ