NEAS[.]5efd8ad2e9e4994497766c9d4c2565c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5efd8ad2e9e4994497766c9d4c2565c0.exe
Size

896KB
MD5

5efd8ad2e9e4994497766c9d4c2565c0
SHA1

bb0fba769d6d4920f05962020a9e844181255399
SHA256

ca228f376f392d7a64e6a242fecc86e500245b40dbf27d7c4efde4bb7ac44cbc
SHA512

ea6e0cf0721a6f1879015d43842817bcfd26d69182915f3ac9732055332d11c524c122e231cd0d298a7697dfab44940fa89cab4fd9840c7f3a111f3ca978b80c
SSDEEP

3072:3E0DODBdtpZFMzoS11KAcNvhtrt7N+raC6AZ:4DftpZl8iNvft7mai

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5efd8ad2e9e4994497766c9d4c2565c0.exe

Files

NEAS.5efd8ad2e9e4994497766c9d4c2565c0.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 65KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 3KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4.1MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.code
Size: 147KB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE