NEAS[.]00fa8e0d969f047bfd7710a0e6320940[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.00fa8e0d969f047bfd7710a0e6320940.exe
Size

440KB
MD5

00fa8e0d969f047bfd7710a0e6320940
SHA1

074a592fb2f179ec7d8cea1033fe5ebc6d4a16d5
SHA256

826e9d0b3c918b2dfcaaf62b8bde7e75e42e6da34018ede0bc3cbf66f88373b3
SHA512

225a49da356097ce9b0c29717e7f8a01dfda432e28cb8fbdbc0cf4f08e0841114bd7550e1a721938aa2f5e8e9901dbd5ab050af0f1f66fb8b34cadfc49a48c7b
SSDEEP

3072:b1S7WmKznrTYUFrfEpAyFTvEO6eHhc6l7oUO3GcwpIS2y0lpR+:b0hKTr1O6ocpUOIZ0B+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00fa8e0d969f047bfd7710a0e6320940.exe

Files

NEAS.00fa8e0d969f047bfd7710a0e6320940.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 104KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

��:~Z
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rLH8
Size: 300KB - Virtual size: 300KB