NEAS[.]1b957a958abf9840ee0938d3d6d18a20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1b957a958abf9840ee0938d3d6d18a20.exe
Size

111KB
MD5

1b957a958abf9840ee0938d3d6d18a20
SHA1

7d1ba9b8297ad4da973cc0dc38cd29febb555d08
SHA256

ea0a895e6f8a2ff80f8df04877e0f9ffd35c990fbf6e49a8961e03ce4c4bd9bd
SHA512

e8d92b09157ddc9f370114b143cf4c8efdd8313999a6427dd75677c8825aae26accda489d2bc7d602c15dba520305148165faf0208be8bb7fa703cf89d76f7ad
SSDEEP

3072:0LRDDuiuB5CygPFjY3feoE9pui6yYPaI7Dehib:0L0/CygC32Jpui6yYPaIGcb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1b957a958abf9840ee0938d3d6d18a20.exe

Files

NEAS.1b957a958abf9840ee0938d3d6d18a20.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ