NEAS[.]d494dd7be36ab7c6936b960e62facb00[.]exe | Triage

Sharing

General

Target

NEAS.d494dd7be36ab7c6936b960e62facb00.exe
Size

208KB
MD5

d494dd7be36ab7c6936b960e62facb00
SHA1

909afab61f5f52e100230447fb49db51dea97c1b
SHA256

62c261115b7ca6d787661523408d8bc86ec52102637151a8a8f34c4804d2b68b
SHA512

ef4c738d35c404455b97f7434c3b80c8f612d27493c5beccf1f2e5ceccd98627f85f7d0eabd4ece6e804c2882f4086f2db0f3cdabd22ce94714db86c9cda7e3c
SSDEEP

768:TpMeEXxR3F8UNvrJb0PztsYDpVLGc3HZWok/6pSyHkSyTrT/1H55Xdnh:TqzXF8CvrJ4PBhDP35RlahJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d494dd7be36ab7c6936b960e62facb00.exe

Files

NEAS.d494dd7be36ab7c6936b960e62facb00.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfcd
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE