NEAS[.]b2a3c7f287815700f7d66e5e6738fa90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b2a3c7f287815700f7d66e5e6738fa90.exe
Size

416KB
MD5

b2a3c7f287815700f7d66e5e6738fa90
SHA1

a4139db7d78af59984548c25be7e96454b929fb0
SHA256

82f59427492c1e6401f810b265d767d0618473f4e58fdc9956eee14ce279c17a
SHA512

dde8dededb901b729fd2debb3a9682f011c760392039dfccb412c3f2e36f5c4ba44abc3c7f2aaa3eef6af5e6f85f62b2ace5a15412214a519d1101fba1f44a7f
SSDEEP

12288:4Pdidr+YJ07kE0KoFtw2gu9RxrBIUbPLwH96/I0lOZ0vbqFB:4PQqYJ07kE0KoFtw2gu9RxrBIUbPLwHh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b2a3c7f287815700f7d66e5e6738fa90.exe

Files

NEAS.b2a3c7f287815700f7d66e5e6738fa90.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ajelhf
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ