NEAS[.]ddf3cb84451710d4a66f386642a8d700[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ddf3cb84451710d4a66f386642a8d700.exe
Size

204KB
MD5

ddf3cb84451710d4a66f386642a8d700
SHA1

64ab97ae5c6db3985eae90f3ed3ae22440602d0f
SHA256

cb2faa242755c8ffc9431c8de0c737cbe578c2fd35931461f43b3bc97d584824
SHA512

783de1045efd8173173a5a9493aa234e0bd571e306dbfeb2405475d46bc42f76c0e92fd331cf1e409b41f7ef488f1b9619267779265e53b8baf59480b60c91ff
SSDEEP

768:cdaCVcUCxzBMq4K1Pg6GDev3fA7WEZYnHROk:iniUCx1MqT1o6G9vZYH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ddf3cb84451710d4a66f386642a8d700.exe

Files

NEAS.ddf3cb84451710d4a66f386642a8d700.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jfbbql
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE