NEAS[.]50b47b26ea1bb0c60d0caab401538180[.]exe | Triage

Sharing

General

Target

NEAS.50b47b26ea1bb0c60d0caab401538180.exe
Size

400KB
MD5

50b47b26ea1bb0c60d0caab401538180
SHA1

97d0240fe41c2d6f8f3d2e9c11767b6c816c3a85
SHA256

24a359d9c1b5a781c50065d2a393e2536fabe57000360710d0e292a26231e594
SHA512

5fd869aec41c819453e97e71ee4eea451877e6ce8555d30f73c6494a32b4e2fa0172a78e4ed652307e1cef0df4bbbe7d2f19c05088c541ae2c30672fc15a7586
SSDEEP

12288:j1+hF0WKVOT+2EY2PnHz3Ei8xzR6yZCbbLgllyw:jshm5Vd2EjT3Ei89gIYLgvL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.50b47b26ea1bb0c60d0caab401538180.exe

Files

NEAS.50b47b26ea1bb0c60d0caab401538180.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.bss
Size: - Virtual size: 776KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.packed
Size: 351KB - Virtual size: 352KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.loader
Size: 15KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE