NEAS[.]aa46fec30207420ce71e0b2f1a6feca0[.]exe | Triage

Sharing

General

Target

NEAS.aa46fec30207420ce71e0b2f1a6feca0.exe
Size

127KB
MD5

aa46fec30207420ce71e0b2f1a6feca0
SHA1

dac520455140000ff918d897d49493b890ae37be
SHA256

dfc473d262ffdb58bd3c9597bab81a5ced045e77d05c0be3d78f89cbfd953487
SHA512

ae2a13d29b2cb279edb221c4b8685d244e5e95b1dac6661d969d58abdb60c1ba9a1a098837486f33eaef0eb1dd0511eedee0165bcb70247f02f1f4c2c82ee49d
SSDEEP

3072:5ynRa31FnRTMVRevQWSIicBD88bcjQ8GhtQMmyjP9:5y6RlARevgI5D8qWM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.aa46fec30207420ce71e0b2f1a6feca0.exe

Files

NEAS.aa46fec30207420ce71e0b2f1a6feca0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ