NEAS[.]1cfb3e0b58636a4cb6c18c8f3e565d30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1cfb3e0b58636a4cb6c18c8f3e565d30.exe
Size

269KB
MD5

1cfb3e0b58636a4cb6c18c8f3e565d30
SHA1

d68c3bcf9dd8ab4d16028bbc0b482a6425b70213
SHA256

43882cedc179386eff216aec06a84ae6e19b002490ba2063a77a79e32ca8de2c
SHA512

5db706e32d9f94a3b7757c2e5400faa54c49e9d999b8f55a44e5ab9d44d1ed7f04343792b2393f02dcc03a6936a8da7358c682cfb4f0595403c276455740c767
SSDEEP

3072:cb0edGybFiwnagmTxntelVB+WK2M52cTMtoBNpgHFORAa05jdgkIkGHg4Y:cpxagmTxnclVB+WK22eo3pgHFOOUH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1cfb3e0b58636a4cb6c18c8f3e565d30.exe

Files

NEAS.1cfb3e0b58636a4cb6c18c8f3e565d30.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 225KB - Virtual size: 227KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jkqvbz
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE