NEAS[.]4d773981c7796213bde060b8f7587620[.]exe | Triage

Sharing

General

Target

NEAS.4d773981c7796213bde060b8f7587620.exe
Size

216KB
MD5

4d773981c7796213bde060b8f7587620
SHA1

a4ba1583bfc852ef36c94bc9cfac3fee31ec871f
SHA256

e15122f7e5e6f62473ebba062c4f52be641b172279839005b8ea8fa4809b398d
SHA512

279d065c9a56d63fe7c5590640228f308dcbdac4104db365f9bbe4c0852906f8c930d597b582ad8fd8c6beecbf3c28c184307a79fe7b40f1c6b5dd5ead73769f
SSDEEP

1536:FUDRi9T5sJdi9bxHNr2pnx6KaUuP6iuwJRFoOWwpiH3:F8RinudiP52xx67lLdhriH3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4d773981c7796213bde060b8f7587620.exe

Files

NEAS.4d773981c7796213bde060b8f7587620.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ