NEAS[.]2bd0cab76b60c7d4d1cf375147ae8260[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2bd0cab76b60c7d4d1cf375147ae8260.exe
Size

372KB
MD5

2bd0cab76b60c7d4d1cf375147ae8260
SHA1

cb4f7d04d8cea1740d32e9bf04a667881226874c
SHA256

9ed9d68cf904b8a10bfd0e2876444974ff243a03dbb9b620b9fbb24ba56a3af6
SHA512

053a7a34576594a6a88c0f2b59ebe1004cc165d870fb9b5d852ae62feb1fdcf56c686a95008cdfe8dcd8b55fbf3e71ac522eaeb09d1faded019df1bea6e44cc4
SSDEEP

3072:UVMfMIbIyw3J92rrKgfKm4g2ggO2QmGiln+BC3K5eqX:RfMmcng2g3vnyK7X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2bd0cab76b60c7d4d1cf375147ae8260.exe

Files

NEAS.2bd0cab76b60c7d4d1cf375147ae8260.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 50KB - Virtual size: 266KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ