NEAS[.]dffb4a947d2f20b4c3e925347f90b7c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dffb4a947d2f20b4c3e925347f90b7c0.exe
Size

2.6MB
MD5

dffb4a947d2f20b4c3e925347f90b7c0
SHA1

e2f62ddb81e18361192db9dd14d4534f90fb87d9
SHA256

9979b9d7817f8aaaefcda43cbe813fc0c9ebdac9b5b632d3481b3022535336b4
SHA512

fea83513714c8c63cb8435ecc7bf382837861882b612bb16580f15ffba24f1419a5e02e89ea494abc9bb8791a9568e776b4f1217579a2307ba1f242ec5bce53e
SSDEEP

49152:5sVoreY2yBkieMCJ4qplsN5tZ9sDrQUw50b0/D7ly5q4jHkDvgm8YwuPJoDuaRd5:uo4Ni2J4KlOtZCDEUi0G7lA3qz8Y6DuG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dffb4a947d2f20b4c3e925347f90b7c0.exe

Files

NEAS.dffb4a947d2f20b4c3e925347f90b7c0.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ