NEAS[.]6909d6a26cc4f164d0402aef7cfc1f90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6909d6a26cc4f164d0402aef7cfc1f90.exe
Size

204KB
MD5

6909d6a26cc4f164d0402aef7cfc1f90
SHA1

a519230c0ccd7f66b9beecce84d689b64e6386a8
SHA256

544f53ee8e181f37e0585454f7478d13929577cf093ec43dd9a584fbebb8d975
SHA512

1af7927a76d5c0f53bf6a7823c0154bc9a7a32a6b40007459d2cc8cc01543771b4742b5cd30728fa05b5d9c8275901ac1262f3a747124ee5825c58347a63cb4a
SSDEEP

768:NPvIFZ8Vb2dgCk9tZD8UzB6OaUhHIewo3JxTOXIxO0a5FmCXr1PYiK8fTEqMqf/B:d2Zfdgrboe3GIxO0QmC7mIbvlK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6909d6a26cc4f164d0402aef7cfc1f90.exe

Files

NEAS.6909d6a26cc4f164d0402aef7cfc1f90.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.jfbbql
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE