NEAS[.]15033d83958519eee6c0192fcf7b3a80[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.15033d83958519eee6c0192fcf7b3a80.exe
Size

204KB
MD5

15033d83958519eee6c0192fcf7b3a80
SHA1

d8b48ff09ee8cea6ee2cf40f0bb8cb00eb544d02
SHA256

58f4c4bd2147a5c2b1f3d3acd8f750d122caa675fb3d0b87266e3f91971416c2
SHA512

b523b7167a2f2e1f968b2fccebf6a5614b5fdd9c9dc1f4a795bf42f2bbef9b7f35e1c413fa655661c36bec4e11ff773e8f0907cc8e48411eb86811b89f754df2
SSDEEP

768:qER48l0DijNiqRaOFsP7xnhedluX1+ncerEMNIIG5NKUtElBhEqMqf/1H5MXdnhK:q6lMi8YsDxyMjqlbGmUtEVvl4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.15033d83958519eee6c0192fcf7b3a80.exe

Files

NEAS.15033d83958519eee6c0192fcf7b3a80.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jfbbql
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE