NEAS[.]b26f4d95bba62ed327840431de00f180[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b26f4d95bba62ed327840431de00f180.exe
Size

254KB
MD5

b26f4d95bba62ed327840431de00f180
SHA1

bc7c0a1a2ae6ce455ab8cc6438e04848acc52fd9
SHA256

bf7d3bb9a71ebe228b6d824debba07ba589da805c216cdf35460a6a8f863ff9c
SHA512

67f0203d9705c99e11ed43b377f88f5a19dd2812191929d4be7cdd82790e5ddf604bcf8369bf7dc3e94aa8f58f0e7316a11ef67831fa570d619f150f923d39b7
SSDEEP

6144:VUeIDo4IkM+qner9NvInDoKLyL/reWaYhl71vcsDDAoRYsmt8nmT75hKcU:l8o4IkM+qner9NvInDZYf715R7mt8658

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b26f4d95bba62ed327840431de00f180.exe

Files

NEAS.b26f4d95bba62ed327840431de00f180.exe
.dll windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 566KB - Virtual size: 565KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 48KB - Virtual size: 217KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ