NEAS[.]26ea1c97343d2540858abad8ef3db350[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.26ea1c97343d2540858abad8ef3db350.exe
Size

161KB
MD5

26ea1c97343d2540858abad8ef3db350
SHA1

83e52d128f2675e4a8bd87917c1edd8c6ad1951f
SHA256

914f5ccd7ef61797f1ac34b62eb6500054f68bb55110bbc1192a24ebcea34260
SHA512

efd0ee42b52a7ef664c400f641dd3876bc148b02bf4590d8c32976c42ad0a3282294aebc164f9303ce934a4a81ba8623ecc8d32af76dc1cbef8123afaa3a8ae6
SSDEEP

3072:p1B31bdBob2QXoshCreIPf/q6em1//3VtEc1LEw4gZL9SlS:p731bdBaBo1TP1nFBLEw4gZL94S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.26ea1c97343d2540858abad8ef3db350.exe

Files

NEAS.26ea1c97343d2540858abad8ef3db350.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ