NEAS[.]96b28e116c9b36506fecff0234a41f40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.96b28e116c9b36506fecff0234a41f40.exe
Size

458KB
MD5

96b28e116c9b36506fecff0234a41f40
SHA1

1590ab599a4c5fcf8be6fcae981aa2debd5978b3
SHA256

d4b5133d47e7a67a5beac3f73ff3b0dd22ffcba0d76d6e4ad9026c86088c2151
SHA512

05bea3212c742d5f339bc7fbdbf4bba23259031b200578a726604f09a1fcb41278bc0fdcace2b8b89a09fca5d85f750486e56edb64aa46d19b07734de951ae94
SSDEEP

6144:HNd68YDdfZf9rtIicBvj14toKTfQZV7+5K6oHos9Z13+/LW29IEw0Y1dEMLrKjc4:D68Odxf9rtn4J4Sx6oIF/ySw6eKjSqx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.96b28e116c9b36506fecff0234a41f40.exe

Files

NEAS.96b28e116c9b36506fecff0234a41f40.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 377KB - Virtual size: 377KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 50KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ