NEAS[.]987581eef155e21c72d36a7769c8aab0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.987581eef155e21c72d36a7769c8aab0.exe
Size

380KB
MD5

987581eef155e21c72d36a7769c8aab0
SHA1

fffd765e54bfe9a3957b2dbffa6b13c44853a297
SHA256

deab0e8784508e611b94a4bab20a2aff9e39c7de08d0413558c46905004af17e
SHA512

d35071c5198b3ac108ffaccee37c7db3236df9d2d3d6056a8b6bb6e7b9e93d77e3e70a7f7e1cdc78f3f69b52f2361067fc3cc436db758dde5ccb0278e570089f
SSDEEP

3072:xChJgYMm4xf9cU9KQ2BxA59SPMLOoUn2:FYMm4xiWKQ2BiCM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.987581eef155e21c72d36a7769c8aab0.exe

Files

NEAS.987581eef155e21c72d36a7769c8aab0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

lumkfko
Size: 72KB - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE