NEAS[.]b54d8008b040d452ee1c2dfc13aabf50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b54d8008b040d452ee1c2dfc13aabf50.exe
Size

461KB
MD5

b54d8008b040d452ee1c2dfc13aabf50
SHA1

819449b02f5f0133dddc4ff0d354c39bdfade449
SHA256

66cbff06d82e365c2c9149ea10317f694e6d60a035d4f527d9430f9b963384af
SHA512

e36b2e180441a37499e6a434f56f103cc9ea77f525987796882514b453cb2f2152dfdc4d6228f48f7302110427bb63af5e5966637946a84e755e4bc63b1f8ec9
SSDEEP

12288:iClvO1XH51attmUo0lOY/bHKRLw+iy1Dx:FGBattmUo0lzrwiyL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b54d8008b040d452ee1c2dfc13aabf50.exe

Files

NEAS.b54d8008b040d452ee1c2dfc13aabf50.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 383KB - Virtual size: 382KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ