NEAS[.]4b74c803b511ac25f7bc5b2631e48d90[.]exe | Triage

Sharing

General

Target

NEAS.4b74c803b511ac25f7bc5b2631e48d90.exe
Size

204KB
MD5

4b74c803b511ac25f7bc5b2631e48d90
SHA1

cb690e2f6d295b4fa4a3a151d8e47e1df5ac337f
SHA256

dc3beb8d8630b8f3d6f1904165df83c664074ae27cb6cc0493dca0e4b033bc57
SHA512

2a67b1cd39a542da82baea513e0de8899b1743764222b6992449e89b3e8d4071f74d41357929ac507b39e460a13e56e7e45cb21d5e9ebc255dbff580ed0bac06
SSDEEP

1536:3quwU80RQ41XixMHIVNLJtPgl+dx62LF:3H5RQ4Sx4IVlPRF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4b74c803b511ac25f7bc5b2631e48d90.exe

Files

NEAS.4b74c803b511ac25f7bc5b2631e48d90.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.data
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kofbl
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE