NEAS[.]1e2dcd5acaaf773b3e5d4a6763ce6280[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1e2dcd5acaaf773b3e5d4a6763ce6280.exe
Size

111KB
MD5

1e2dcd5acaaf773b3e5d4a6763ce6280
SHA1

cc20a405e29cc67790e7ff1211bf4e5fee3899f0
SHA256

8d48ea4cd359d39add4c71618ef637fa462c150a38db656c3e19086dfbe843dc
SHA512

bd97b287565f0bf54dbba0d3f96da145ee0bd3ecaf7b889aaff7fd8c0731ba1858fdc255bee2e65ae5de47879b51fbb582c769b7bac9ae1a49a9e3c18260f1cb
SSDEEP

1536:zv0uYegpvJ731bm6p69sJJRQaRRs3cO57OWxXPu4n6yYPLBgI7Ckeh7QUALf:zvp0rBbm6posjeaE9pui6yYPaI7Dehib

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1e2dcd5acaaf773b3e5d4a6763ce6280.exe

Files

NEAS.1e2dcd5acaaf773b3e5d4a6763ce6280.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ