NEAS[.]b118502ed4409f4862c8067796b1d440[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b118502ed4409f4862c8067796b1d440.exe
Size

507KB
MD5

b118502ed4409f4862c8067796b1d440
SHA1

a1b14e8f7441abda555d88fa78bc7afe1e65440f
SHA256

8d08ef05b20a3d7048e7f25a8e56b3ba9b6476a86c64c98b39d6d706843bc554
SHA512

3b1ab08bb898debc0a940435c0904d889e829375f08ddb1ae7008492c8330f2ac3d373f4de1860395f6f23ee2d843f14d4bbdc5c7cd78ba70650363cafd1385c
SSDEEP

12288:8dPkCDt1EG2XVekhdeTmN1xqm4eAAcKehct3YkZ7WAU:8dPkQ1bqA+ge/Rk2p7WAU

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b118502ed4409f4862c8067796b1d440.exe

Files

NEAS.b118502ed4409f4862c8067796b1d440.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 1024B - Virtual size: 756B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 239KB - Virtual size: 239KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Headers

DLL Characteristics

File Characteristics

Sections

.text Size: 2KB - Virtual size: 2KB

.text Size: 512B - Virtual size: 464B

.reloc Size: - Virtual size: 16B

.text Size: 239KB - Virtual size: 239KB

.text Size: 1024B - Virtual size: 756B

.rdata Size: 239KB - Virtual size: 239KB

.data Size: 512B - Virtual size: 4KB

.rsrc Size: 6KB - Virtual size: 8KB

.reloc Size: 2KB - Virtual size: 4KB

.idata Size: 512B - Virtual size: 4KB

.text Size: 4KB - Virtual size: 8KB

.idata Size: 512B - Virtual size: 4KB

.rsrc Size: 8KB - Virtual size: 12KB

.idata Size: 512B - Virtual size: 4KB

.text
Size: 2KB - Virtual size: 2KB

.text
Size: 512B - Virtual size: 464B

.reloc
Size: - Virtual size: 16B

.text
Size: 239KB - Virtual size: 239KB

.text
Size: 1024B - Virtual size: 756B

.rdata
Size: 239KB - Virtual size: 239KB

.data
Size: 512B - Virtual size: 4KB

.rsrc
Size: 6KB - Virtual size: 8KB

.reloc
Size: 2KB - Virtual size: 4KB

.idata
Size: 512B - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 8KB

.idata
Size: 512B - Virtual size: 4KB

.rsrc
Size: 8KB - Virtual size: 12KB

.idata
Size: 512B - Virtual size: 4KB