NEAS[.]b8c92fe534ed5443e2437d58a099b9d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b8c92fe534ed5443e2437d58a099b9d0.exe
Size

416KB
MD5

b8c92fe534ed5443e2437d58a099b9d0
SHA1

6bb18f412ef850b00b5a0f91fa4acc96c157967f
SHA256

2aaba387a128967c331e4118914c2cf42b8cc8d9f3b15d04702fe0ccc5007612
SHA512

b1392861804be7c4f8ffea635833e58e1896ed8bc6d75e52097d97111657072bd2c199988562136100263984a77a454f8be24ced688a5f75b209973fdf19c8a0
SSDEEP

1536:6Z/fgEAqJlV+n1EgGHo7P1YPx28VaqZon3s:61gEZl0nt/P1YPxnZon

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b8c92fe534ed5443e2437d58a099b9d0.exe

Files

NEAS.b8c92fe534ed5443e2437d58a099b9d0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 149KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE