NEAS[.]14fb3b6293d4a9776730ae2aec6b6d90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.14fb3b6293d4a9776730ae2aec6b6d90.exe
Size

869KB
MD5

14fb3b6293d4a9776730ae2aec6b6d90
SHA1

81ef53498d925bfb198bfe95928214810fd8a087
SHA256

9bc26b8852c8d7f107ad456e87dd05d3a6a66ba43018dd1b8ea138f28618222b
SHA512

9d825e83bb2b48378c78c1e89bc42b7bb1b17c9bff116c8df364b4523ed43c9ac63ed8e5563eeb2a722d345e31a8d850b8c820d3cbd651bf1f9f36069a4dbc71
SSDEEP

24576:5gKfHIu+Rt+x5MapU/bnBLWx6zJqew5V:5gKfIU5Mf9h+V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.14fb3b6293d4a9776730ae2aec6b6d90.exe

Files

NEAS.14fb3b6293d4a9776730ae2aec6b6d90.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 324KB - Virtual size: 324KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 492KB - Virtual size: 492KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ropf
Size: 512B - Virtual size: 18B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ