NEAS[.]b9c488ed33e56e27217b2ce94673e5e0[.]exe | Triage

Sharing

General

Target

NEAS.b9c488ed33e56e27217b2ce94673e5e0.exe
Size

269KB
MD5

b9c488ed33e56e27217b2ce94673e5e0
SHA1

eb0a5b094e49d57e739d1c69c81c188048f6c65c
SHA256

58359ec1d3689750767dc40c7297ffec58cd1e138f6e102365891d7ff1a9b40d
SHA512

ff7940ad0a46d8d3e6cd0da0705cea4281ce27cdebf5f92f276e6027bf2411a87b3a29327a1ad59eaed951b729aef07783d21eea914947f5f35f1f097f3b668c
SSDEEP

6144:WvM1Iw6ogwDX4EYtCwGtMtkiXOoloMr1JeSldqP7+x55Kmj50GXoCcmASBTw2AX4:WvM1Iw6oWChtMtkM71r1MSXqPix55KIv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b9c488ed33e56e27217b2ce94673e5e0.exe

Files

NEAS.b9c488ed33e56e27217b2ce94673e5e0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ