NEAS[.]502852f0f2521885f2ba6289d62588c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.502852f0f2521885f2ba6289d62588c0.exe
Size

208KB
MD5

502852f0f2521885f2ba6289d62588c0
SHA1

6891ca34a1c664f6494997abb18a7fd73b3acbbb
SHA256

0c32de0430c64a4997769f4ef2955379f08e3f1b000145a1805e8b4d47d8c74c
SHA512

aa99146ffc90946f15758d263669714cc8c9c2b712ac73ab633bcedb362a0653e9c4b2552de4d1117022ff66d286ba24552e256649a4eec78202987b62705e88
SSDEEP

768:TpMeEXxR3F8UNvrJb0PztsYDpVLGc3HZWok/6pSybkYyxrT/1H5QXdnh:TqzXF8CvrJ4PBhDP35RnMhU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.502852f0f2521885f2ba6289d62588c0.exe

Files

NEAS.502852f0f2521885f2ba6289d62588c0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfcd
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE