NEAS[.]3018b6f3319bc96be7345136b585b080[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3018b6f3319bc96be7345136b585b080.exe
Size

88KB
MD5

3018b6f3319bc96be7345136b585b080
SHA1

cbd246233d4867375d97f49a4672a7468ee7ea3f
SHA256

ac98032cbd683c98f6225002a147603ed4ad5d1269909410ec119f61173076b2
SHA512

96d3c5501bfb8dee58a60ec54522e914ad289664a97f98c43793e50a5db4be083b4133ecefc3823388e96b882a677f59a7122596ee6c96864e998e45c2e4c95b
SSDEEP

1536:qgbqRUz6P21x61jMT0mTFibDKa1Fohl7sPzvyCJjyt+Q:qpA6e1x61iBob2QFonwPzvyCJjyh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3018b6f3319bc96be7345136b585b080.exe

Files

NEAS.3018b6f3319bc96be7345136b585b080.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ