NEAS[.]f2e6d6e9087fe8d29c14042f69a7e640[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f2e6d6e9087fe8d29c14042f69a7e640.exe
Size

464KB
MD5

f2e6d6e9087fe8d29c14042f69a7e640
SHA1

aa4c6d52ff2bf4a2b4d7b6eeb5ad4b476660e5e0
SHA256

619b4cfd5ed985c4bd314ab9dd501adcc9b4863a8db1a572f4fca21279c3f8f1
SHA512

97b867ccf0e3300d2e5416b709cd76943eb0d6ba6a66293d932884a885948f1ab909cd3b319763cac1f944e59603d735c33abff9c1171f1cc4a1a90ff731898a
SSDEEP

12288:T46+6rftPh2kkkkK4kXkkkkkkkkl888888888888888888nI:T4r6rlPh2kkkkK4kXkkkkkkkki

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f2e6d6e9087fe8d29c14042f69a7e640.exe

Files

NEAS.f2e6d6e9087fe8d29c14042f69a7e640.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ