NEAS[.]34dc1fafc4e53b5d28e43a1ab7ab7450[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.34dc1fafc4e53b5d28e43a1ab7ab7450.exe
Size

1.6MB
MD5

34dc1fafc4e53b5d28e43a1ab7ab7450
SHA1

afe90d2f3f070ea660595d38462dac1669aa1aed
SHA256

d3ecbafb256e5b9a08808164dc5fc6e653226720b736f3b4eecd68bb1e346e35
SHA512

1dab07f17a1a965218f4a18b237e3c2d2fb762ce0fc6233a66ba82559285d39ebf22a64f2671680736f85e28609e5ff37c904289d10ebc0ba4463bd44e1eb6a0
SSDEEP

24576:H9WXJ9H/Kv2Xmd1dnQmW/a+VJhUfmBW0FL8I7OD3d5X:H9WXJ9ivUA1VWC+VvUfm9wr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.34dc1fafc4e53b5d28e43a1ab7ab7450.exe

Files

NEAS.34dc1fafc4e53b5d28e43a1ab7ab7450.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 468B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ