NEAS[.]b1dca2e68f5715c3fb853466cc12b100[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b1dca2e68f5715c3fb853466cc12b100.exe
Size

1.0MB
MD5

b1dca2e68f5715c3fb853466cc12b100
SHA1

cea4d66fc93752a6a9615f7cda669b535559c917
SHA256

310a028f20bea0e1ad7a5e6faf64ed602d8e04caac13cf2488af748861dedc9f
SHA512

c489c7ebb8a3bd453ca113f01fb26fd875402a9db9f8abcf61e8d14643329c7052430626a8f4313e5305577639f2d217f19d8550be2da07fa859f6b1aee52f1e
SSDEEP

12288:gU9h4kTPhbrpqZlmy/PRGjDqlsS5uPnBkVkf6Tevk8qVhSmOLx6KOQD8BJbSCX:VL42hpslj/8GsDnBkVOMRPVhSb6h04n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b1dca2e68f5715c3fb853466cc12b100.exe

Files

NEAS.b1dca2e68f5715c3fb853466cc12b100.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 926KB - Virtual size: 925KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ