NEAS[.]0304af43c75ae6dfb50fa8dd3c5a6100[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0304af43c75ae6dfb50fa8dd3c5a6100.exe
Size

208KB
MD5

0304af43c75ae6dfb50fa8dd3c5a6100
SHA1

e801d632125a4d8955201a5cec8caf25ff6c725d
SHA256

5b63d5343f94f10de42a2198204627fc2f593b36f28ea8d46985200fdf96cd37
SHA512

af5c66e86729a4c1d91d957b07ec17a8bccc67aeef2983bf23f1ae4ac14378c4284624ffa316bdd0c2c8ee8f06214e7daead612664eb279817c137a5d3e95695
SSDEEP

768:n6cPsAifwZJ0cZGUk6vJOBdhqm2PeaiBWJQekBPJHU02p/1H5QXdnh:6ccYH/Gnc+hmlJQekBh002L0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0304af43c75ae6dfb50fa8dd3c5a6100.exe

Files

NEAS.0304af43c75ae6dfb50fa8dd3c5a6100.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kofbl
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ