NEAS[.]ab2db3ac7c6392b57dab4973a19896f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ab2db3ac7c6392b57dab4973a19896f0.exe
Size

473KB
MD5

ab2db3ac7c6392b57dab4973a19896f0
SHA1

b01d0ff05d75e0ddb6497c4215b0caf2cc63a423
SHA256

b8a988a37564daccb645de855bf7bc5855d8eed219d6e4f4cd6e0bd98e8dd275
SHA512

b3db8c0a157864d320579cbb1a584857cd0e4ff43d2334ea632937e0d15b07ee5e3dedbaff8ad5c23d0a07d1e93680d0b584e53574df7dd2289c97bdcee7e45a
SSDEEP

6144:mcm7ImGddXv/VWrXD486jCpoAhlq1mEjBqLyOSlhNFF2O:I7TcfNWj168w1VjsyvhNFF2O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ab2db3ac7c6392b57dab4973a19896f0.exe

Files

NEAS.ab2db3ac7c6392b57dab4973a19896f0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

Size: 156KB - Virtual size: 156KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ