NEAS[.]38b634b97f99f5fb60d2089bf444cce0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.38b634b97f99f5fb60d2089bf444cce0.exe
Size

208KB
MD5

38b634b97f99f5fb60d2089bf444cce0
SHA1

45a8ffeb939fa929e91cf46cfbe291d67393a0cc
SHA256

d111f128776f6d72b2feb0eb7054539a86521e6763d1d50f4b19564311d4f1c9
SHA512

642fcc0169605a2132ffd0858f623a887334cd0875e4f9ab8ac08de70f92732d137028876a0bc8d769e2704b5e10827e6f248964c375aefcb435a19e2ee29159
SSDEEP

1536:FQV2d5syVESoHqpZ3lxeIEEEWStjfc6HdCVh:k2d5pVmSZ3lFStjU1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.38b634b97f99f5fb60d2089bf444cce0.exe

Files

NEAS.38b634b97f99f5fb60d2089bf444cce0.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ