NEAS[.]34f080ebba4a6849a3cad967e4e6a550[.]exe | Triage

Sharing

General

Target

NEAS.34f080ebba4a6849a3cad967e4e6a550.exe
Size

396KB
MD5

34f080ebba4a6849a3cad967e4e6a550
SHA1

e0055d5229766796bce3ef29ed2d96a8223ad22d
SHA256

5fcbe9d64c025042d87a8302735717b1f338dd87abb211839914a5642be708a9
SHA512

7656dbfd3cb65287fa99ad2e44eebeb8b75b57f90d4c52e636ce63c541bec26906cead57569d6ed545a2c9e3b1a04feabca846e3ada20e786663d57dba318c96
SSDEEP

6144:p731bdBaBoC3u2wjsHtCsHvw2ycqc8XGc87vhkzhVhE0TudhtqE:p1b43EsHBvw+8XNuvUE0Y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.34f080ebba4a6849a3cad967e4e6a550.exe

Files

NEAS.34f080ebba4a6849a3cad967e4e6a550.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ