NEAS[.]e1939bc45eb716e4d5dd5244377c5d80[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e1939bc45eb716e4d5dd5244377c5d80.exe
Size

148KB
MD5

e1939bc45eb716e4d5dd5244377c5d80
SHA1

7c63ccee9a5ee5c294b8aaaf47ea2cc16bd997b2
SHA256

8da34faf581bd5cef16c98cb77d3da41672306046cdf7e5d57e679e7ad3c7cb3
SHA512

9f3854ceba83623051c4211a28b8951b8d6da371b32bd2a399e6be950127f73beb73bc25e5061ad8619ba99a9d0167b3940fd056163f1a9227799167deda5df0
SSDEEP

3072:wCMiqJl3v1SRAsvdhxBz8bNk/AKItB/pL/s9hlSLUFWz+:wCMzfMRvxBIO+XpDnUUz+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e1939bc45eb716e4d5dd5244377c5d80.exe

Files

NEAS.e1939bc45eb716e4d5dd5244377c5d80.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 142KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE