NEAS[.]31a431883ba8bfdb68479199d0168c60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.31a431883ba8bfdb68479199d0168c60.exe
Size

472KB
MD5

31a431883ba8bfdb68479199d0168c60
SHA1

6babe590da4e6c2a17157686685239abc6d403c8
SHA256

79374ba42c5f23121b27db5f48c7ce3255a0665346c18be35270ab116f9d3468
SHA512

734625a2b1f26a98f3bb718fac70ba458c4fea0409f416a61e2af90c917230f2609a286ba8e6c4f58edbc159d18275e1dabe0571fda2ccb88beb98504417a183
SSDEEP

3072:d8RinudiP52xx67lLd+iHDo9GIPc1QI5bi6o++YgSt:CkgiPA6RAP9GIPW/hi6o+rr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.31a431883ba8bfdb68479199d0168c60.exe

Files

NEAS.31a431883ba8bfdb68479199d0168c60.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 52KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ