NEAS[.]dd8a1996cebeff932d5927b0895f7090[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dd8a1996cebeff932d5927b0895f7090.exe
Size

228KB
MD5

dd8a1996cebeff932d5927b0895f7090
SHA1

f38a1f6a0657b2790fb49617f51d770f9c2eb85b
SHA256

24009cb758d1cd8f8e2c96433a6db26b80b50857230de8d5883dc649176fd6a8
SHA512

4fffa32b264c221c761ab450d6ee3d7fce7e75bcb55c5820c74f8726794b8980b10f1f50cb9cf3acd7987df09c230a5b9e0ec281efc29d1e713ef424b1a31adc
SSDEEP

1536:QIRh6WgdaqsPjAj2IAfurijKJRQoRJJ5R2xOSC4B:Q8UdaqQYOKZeorJ5wxO34

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dd8a1996cebeff932d5927b0895f7090.exe

Files

NEAS.dd8a1996cebeff932d5927b0895f7090.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ