NEAS[.]462d39b4cc1a3963be5f67472a51dd50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.462d39b4cc1a3963be5f67472a51dd50.exe
Size

160KB
MD5

462d39b4cc1a3963be5f67472a51dd50
SHA1

99f19a77c6604573bfcb3a8ff017b4a806f90ac6
SHA256

0da3eb17894d6d7cdfabf661aaf403b6572ab3332fa4d31e6fbd54f037ea0b79
SHA512

eac585d1a5981b8668d173632f7f58adb48c8d4748a36e14b6bf9a988416998a253e5fe0e6a467b611925123a7b5dc8e1d4447b3feb87ac8437ffe377ff05f81
SSDEEP

3072:2q4e7qiyqBpKlsl/EuaeTWzSfWERN0kEy:2hfqB0lsGuaexWE7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.462d39b4cc1a3963be5f67472a51dd50.exe

Files

NEAS.462d39b4cc1a3963be5f67472a51dd50.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

obhamgfk
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 77KB - Virtual size: 77KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE