NEAS[.]58e3b64a3a0fd9efb12ce54f191e8bc0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.58e3b64a3a0fd9efb12ce54f191e8bc0.exe
Size

900KB
MD5

58e3b64a3a0fd9efb12ce54f191e8bc0
SHA1

7124a71d1dae7e2d299480a39c479a3753f5157b
SHA256

16b24eb49d15b95db3a3c81575d7182cb6151386ccbb3f1338f41fb8beb9ff99
SHA512

9663136bbb40dda2d78dee59335920b1caa32de1b8604cf4d78bf759f6d5502b2f298f875d347532d79be00d0dbab3208ae441a954d5cc419dcf842d1cca33f4
SSDEEP

12288:qeZbTqpKDek/UCAVXn9lwIJ15shELW7c4sdxlhnZ94dMzwZBgdO3tBoPae6N:qeElnCAt7vJkGmcdBnZ9qMUZyYd9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.58e3b64a3a0fd9efb12ce54f191e8bc0.exe

Files

NEAS.58e3b64a3a0fd9efb12ce54f191e8bc0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 778KB - Virtual size: 778KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ