NEAS[.]8894a404b439507bc9bd270440d0ed80[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8894a404b439507bc9bd270440d0ed80.exe
Size

204KB
MD5

8894a404b439507bc9bd270440d0ed80
SHA1

936f101648472ab2838549b236a2018d4dbc9da5
SHA256

462cc9b7208f84096b4e9828990e07bd52b4d1a94b405613ff0da685b9d32cb8
SHA512

5abf2e44e8b535abe226d43655b29aa2bf621bc23e90fab2dc5357a8b37053c719ea78b3cc22f84dc7b8430c3f4b00fc2a6ccedf8c1355e8f884475f2547e4b3
SSDEEP

768:OMxj1LePVMOSn1AK+CD/Dpf7JXOKS6822HKVyX1B8yMz101lO/RZmiu1M2p/1H5g:DydMzeKpHpTZOz68ht8Rze1sQu2Lcl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8894a404b439507bc9bd270440d0ed80.exe

Files

NEAS.8894a404b439507bc9bd270440d0ed80.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kofbl
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE