NEAS[.]011a98e50f72c423df85760109e59750[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.011a98e50f72c423df85760109e59750.exe
Size

111KB
MD5

011a98e50f72c423df85760109e59750
SHA1

3bd80c44ad0f51d254a9a5cb0bcd5fc5241fdbd0
SHA256

257f9e612e8ab6692d5ac32a3e0f9d7908126134695648aa6a8a6c8e09ac89a3
SHA512

813989c0a26e425e0f0c8ae8c755067b92a928d7f9d853dcbdb3000b4fb6f7e403d66ee2440c58725ae423d1966b9fe4ea725278927448b4c02e55164a774b99
SSDEEP

1536:U6Vl71i4YI2tYj7hWYaADfT13il0eh4uDuPhgSKRQURRs3cO57OWxXPu4n6yYPLn:HeADbCDuJfKeUE9pui6yYPaI7Dehib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.011a98e50f72c423df85760109e59750.exe

Files

NEAS.011a98e50f72c423df85760109e59750.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ