NEAS[.]14d67a7f5bbcedf9f11990db2e860100[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.14d67a7f5bbcedf9f11990db2e860100.exe
Size

64KB
MD5

14d67a7f5bbcedf9f11990db2e860100
SHA1

a37c429449c716761a76cec05bc1e8c6ea852e5d
SHA256

71ae2c4bb767095781bb9581a7c23c41869c7eb2cebc8832dd8e9bbdbab813be
SHA512

b38ccd0849604d128c89d57635ed761e14dc1762048ed1e65cb1dec7f6cf5dfb403f9f0870f0e2f95334a0376331c9e2abd86be1b3ad0d85057a07ab60d61562
SSDEEP

768:BxwfKgnTD77GOWG1TYgoI0BXl4vQjVrB3hP2p/1H5uUXdnhUxg84xlWu:BxwfK2dE445rL2L4u2+lWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.14d67a7f5bbcedf9f11990db2e860100.exe

Files

NEAS.14d67a7f5bbcedf9f11990db2e860100.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kofbl
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ