NEAS[.]29be511f96d44d5cefe39b0792e261f0[.]exe | Triage

Sharing

General

Target

NEAS.29be511f96d44d5cefe39b0792e261f0.exe
Size

240KB
MD5

29be511f96d44d5cefe39b0792e261f0
SHA1

c742f92fe750431d7c6ffda6744573a059d617fe
SHA256

a35acd14a19ef53a7df64f4e582318dd72732b7c62c60dbba9251e3eb7759680
SHA512

29033d820c2d1118d3d9f6c4f6d80ceb78588785439c661442b4b9b989c51c9f02ae96b7ba8cf017b409beea032b4d51718433bfb42eaf53acb80ddfd9726e47
SSDEEP

6144:gU0YbTXyHPAdY3fK0AYUa33fgSBmRzsBGadBB846yJEVE:gU0YbLyHYdAKn+PfIz8GkB8WJD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.29be511f96d44d5cefe39b0792e261f0.exe

Files

NEAS.29be511f96d44d5cefe39b0792e261f0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 432B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 133KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

/6877976
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE