NEAS[.]cfc70038f60e64d0b578d468af87a9d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cfc70038f60e64d0b578d468af87a9d0.exe
Size

208KB
MD5

cfc70038f60e64d0b578d468af87a9d0
SHA1

25b553327be09ad8e434a9e41b12b77916865409
SHA256

5315253aa8892f8f4a504886c671fff773d2bb0f00fecffdd7af461e72d58ea1
SHA512

e3d8bceddc749ba89eee8ac58196b558b99d5d24fc0475d9a766b6c9b7e4e97940bb2d0d5127d4232073db6c46b19ac991a2073ffeac13e2cb2cebc254c4f18d
SSDEEP

1536:6lmm4FheSuX4RPO3JFjmNJ3D5Pp4j02rOnDXwBg:Bm4FhWKPO59oD0JVg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cfc70038f60e64d0b578d468af87a9d0.exe

Files

NEAS.cfc70038f60e64d0b578d468af87a9d0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ