NEAS[.]26d9383fb7f8835b2ea4cf3bf6b3e7e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.26d9383fb7f8835b2ea4cf3bf6b3e7e0.exe
Size

200KB
MD5

26d9383fb7f8835b2ea4cf3bf6b3e7e0
SHA1

cd095feccd6002cefb2d6c8ba8c5e6832d628b70
SHA256

a0532182ff2568f46339e919e0affbfd0470aa27820eb9866e11eba36dc53902
SHA512

d95dc541366d785bb54f72fb0291cf56845d5a0a5ecc9329a167fa468544b010929bc385d79ca712edc7624c5647fb739131a6f07fff8e20cdfe0b1f1c5c627f
SSDEEP

3072:S2qVkUPEQHcSsevE9pui6yYPaI7DehizrVtNepyWdUqPh3pihhrySSSSSSSSSSSV:IkUMoc+Opui6yYPaIGckpyWO63t5Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.26d9383fb7f8835b2ea4cf3bf6b3e7e0.exe

Files

NEAS.26d9383fb7f8835b2ea4cf3bf6b3e7e0.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ