NEAS[.]cffca55042168f1fc61096770f9c51bd[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cffca55042168f1fc61096770f9c51bd.exe
Size

111KB
MD5

cffca55042168f1fc61096770f9c51bd
SHA1

39beb9eb2e2f5f6a00838b6e816117059a6266e1
SHA256

cb852486c8b53ac32c68363db80ccb9f86c6ea90522db38cdb48a24a3ac69441
SHA512

ff6bbb12a4878bc7dd1e982468287b75b685641ab2612155bb717dd70d817f1b1354a4631e180f3c3615754c0410db5c04544043f5158c396250220c31d5a575
SSDEEP

1536:aLhXZ3GYuPhHW8DSepYkGBLWRQARRs3cO57OWxXPu4n6yYPLBgI7Ckeh7QUALf:2hXZ85WURYtlWeAE9pui6yYPaI7Dehib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cffca55042168f1fc61096770f9c51bd.exe

Files

NEAS.cffca55042168f1fc61096770f9c51bd.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ