NEAS[.]d015acbd0132959774dcc0c039fdf320[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d015acbd0132959774dcc0c039fdf320.exe
Size

204KB
MD5

d015acbd0132959774dcc0c039fdf320
SHA1

ca6bbea04427f3d6141b168a398931ffda29953d
SHA256

4bf891d62abe99229235ec900e5e1cec6425937f9ccfd9e5ff72d366c9c3e6ac
SHA512

eefc079f3a7929489bad761799e3e626c1c3157812dbfb93d6df02d156df105640e07ee03051df5c06a1194a92a3455a4a839d16df3f53219bfb19f370c47003
SSDEEP

1536:imOyrAavNyJfIjoBe12KwbBxhx50EvlJ:iartvNyJm89vlJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d015acbd0132959774dcc0c039fdf320.exe

Files

NEAS.d015acbd0132959774dcc0c039fdf320.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jfbbql
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE