NEAS[.]08f8679f50f27aa7fd463553fa3d7820[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.08f8679f50f27aa7fd463553fa3d7820.exe
Size

204KB
MD5

08f8679f50f27aa7fd463553fa3d7820
SHA1

aa41437d767777899229d2870df4910fe265aa3d
SHA256

28d36ae8fce1cc03c82e9b483fd6b947f3a794b12a2f536cfd46e0abd2b82231
SHA512

b1013d0a76b7c4af7c6ad5ff9d9177bc7741e4a14cb483c7969ecc560e39073a587e8cd6f0737f6816acbf308e126856fea32e7c7d4ec4e46e2a3e7e48af5780
SSDEEP

1536:C3apwXo6snSI7+4TfjBskSx8x35ncc+rpPJrpHEkxEOUR1:8C6xRyfFP0o35cc+rpCOUz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.08f8679f50f27aa7fd463553fa3d7820.exe

Files

NEAS.08f8679f50f27aa7fd463553fa3d7820.exe
.exe windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ