NEAS[.]a488f6a4780904c02c883a7a40f18e70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a488f6a4780904c02c883a7a40f18e70.exe
Size

80KB
MD5

a488f6a4780904c02c883a7a40f18e70
SHA1

4d70e93497221380ab135264f8eaa07ebf4ab3dd
SHA256

d1302fa4c3babfa2d8958504c9a92ae4995c27208ecbffb10f33646104893906
SHA512

33b1acfbef09786817ea61d79bdde541020c1a351140652b605fa1ea2cfea223701e0f8cb947df6165b6ed23ef142908fe0b9f250b7fc73e088c24b4df4e103f
SSDEEP

768:W2UWm7+qejN/uUG0hEI8FyhvHsIsrpGhTJh82UzjU5OsLiQ8BMZGGo1Mt3DOolAw:0gNM0hYsMbpGN32zjUx+k5a/Dkqrw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a488f6a4780904c02c883a7a40f18e70.exe

Files

NEAS.a488f6a4780904c02c883a7a40f18e70.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ