NEAS[.]d4e6bf292eaf410d168d4b3807eb0c20[.]exe | Triage

Sharing

General

Target

NEAS.d4e6bf292eaf410d168d4b3807eb0c20.exe
Size

464KB
MD5

d4e6bf292eaf410d168d4b3807eb0c20
SHA1

b66cd092677f4dfe31e4f7cdf20a3d16fae6c389
SHA256

7514b4e3697fdce41ab96e27962f354ccf9a78422c94e1a771fd3c0c0076733e
SHA512

026c924d05c9fb4470e26e4f875f0286797e7d3f96b64555254a6b8918f19bded5df8e33b1a70f31ad6916ec8c0a5057f9aee9255aeaaf26cc0865c8f877d93a
SSDEEP

12288:ZrRW4ftPh2kkkkK4kXkkkkkkkkl888888888888888888nI:XlPh2kkkkK4kXkkkkkkkki

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d4e6bf292eaf410d168d4b3807eb0c20.exe

Files

NEAS.d4e6bf292eaf410d168d4b3807eb0c20.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ