NEAS[.]6475980c8b3039769679ede7918bc480[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6475980c8b3039769679ede7918bc480.exe
Size

208KB
MD5

6475980c8b3039769679ede7918bc480
SHA1

304c039fb595ebed40e8a2161fd98b4e15b94e3b
SHA256

2cdba32c0840b15df344dfe205fbe9af86818eea6dae6f18363a384c28a17dc3
SHA512

b41c0238c89e87be6f78808db15fa13050057b8d1b07d3fd83287f7f392cf7a7eb7ffa007f02badcabde0ee5b697ecdd6c7e0c80554eac5857b51ce77bf8b193
SSDEEP

1536:t/XKweQ8WihIt4OfqK5gU8EFv7cTAkGhzB:JPe2t4NK5JpFv7cTAVb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6475980c8b3039769679ede7918bc480.exe

Files

NEAS.6475980c8b3039769679ede7918bc480.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfcd
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ