NEAS[.]28a26a36a1b12e5a18007f51f6c50fa0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.28a26a36a1b12e5a18007f51f6c50fa0.exe
Size

4.1MB
MD5

28a26a36a1b12e5a18007f51f6c50fa0
SHA1

67276bd5b02025396f4eb300974574a00e5e576d
SHA256

4ec42e4add3f8c5f4ab011589a5fa82d689c4bb54adcb76476ec9f8a93f43f38
SHA512

4c2dd5f055734f75fa831ce18a7a458d06f2a617dedd7f7401f03daa4a0ec5b2cdad8ad13d34af356a3ad8ea929a7d96e7044a936cda7d829cc6be77fc3eb042
SSDEEP

98304:H9YfADWpFy7YHgNDfXQ1veFPk5FaoCRrgGUDxM:6fA4cDfgZeVmCJWlM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.28a26a36a1b12e5a18007f51f6c50fa0.exe

Files

NEAS.28a26a36a1b12e5a18007f51f6c50fa0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ