NEAS[.]bee218a2ca69f5303f5c4407687245e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bee218a2ca69f5303f5c4407687245e0.exe
Size

653KB
MD5

bee218a2ca69f5303f5c4407687245e0
SHA1

a41bd397bf38f2b6a8828c6c18ce378a414edba1
SHA256

1acaa81ee3f42df59c4ff03f921e00c914aa387a3a3647fc6c4f282b7b449973
SHA512

a24a58d359fd783554ff13a2b695e219bf0de88192088290d25812d9c652d5c06ca9933f8951496004aeb316d082a56281ebbda55a88578a1993153cb4076ad4
SSDEEP

12288:W2lMB4n5663lD0cljn9Cr1WCTHL12OSWms1hBjvrEH7SF:WaU4nljn9AWoHLnSbsprEH7SF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bee218a2ca69f5303f5c4407687245e0.exe

Files

NEAS.bee218a2ca69f5303f5c4407687245e0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 460KB - Virtual size: 460KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE