NEAS[.]7caf2a8dd1c25e2028fe14c06d39dae0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7caf2a8dd1c25e2028fe14c06d39dae0.exe
Size

13KB
MD5

7caf2a8dd1c25e2028fe14c06d39dae0
SHA1

c21bb87f214a732ad9ec3934207282b8caf6ac91
SHA256

a71af94544ace68bd6a5a99853f16452de43dfc322cefbcd5658fc7eb648119b
SHA512

9178c43f83ff102e9e01a9a19f35fce46aca292c6040ba512732dd6d30b235ce106e6c74e994ee67f5088bcb6907d35fb3c59e3336795b4541c1183ac2fc96d6
SSDEEP

96:Zbaks20aIbJJWXz+HNtnHftstOo7vdwctdfO8srQw0qE4JJWX2L3A:IkRhdXzIxHfCYWdwctdfO8srQBrX2bA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7caf2a8dd1c25e2028fe14c06d39dae0.exe

Files

NEAS.7caf2a8dd1c25e2028fe14c06d39dae0.exe
.exe windows:4 windows x86 arch:x86

4355d1f673020df346b102780f8e28b9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

vb40032

ord618
ord631
ord669
ord689
ord690
ord100
ord186
ord199
ord572
ord581
ord595

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ