NEAS[.]c311f93f7e202b81d87d6bcfa0e4c420[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c311f93f7e202b81d87d6bcfa0e4c420.exe
Size

212KB
MD5

c311f93f7e202b81d87d6bcfa0e4c420
SHA1

2a043f4a3ca91b8770eb2e3586a3b62f1171e6c0
SHA256

99ed5f34c09a092ff7158945fdaa1bbea17df1097c1eb48da5c0d1763cc68fe3
SHA512

9822cbb774980c0442780934e741e38c14a5cc30dc8b919e605301f417e72b5e3a841810e10caf4a15ba396da8df069f92d46d85b351dbae297a875f7aa20ea7
SSDEEP

768:rDApAJmxwUh6zO5g7Wfb8BvTRbdUE6Sijv7xCIe28OjX/1H5WXdnhg20a0kXdnh9:HsASwKScoNSLDheVO9KH1jubo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c311f93f7e202b81d87d6bcfa0e4c420.exe

Files

NEAS.c311f93f7e202b81d87d6bcfa0e4c420.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vryeypb
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fldo
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.textbs
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE