NEAS[.]2e61e2ba4e0cca994accde4b2e1d6830[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2e61e2ba4e0cca994accde4b2e1d6830.exe
Size

346KB
MD5

2e61e2ba4e0cca994accde4b2e1d6830
SHA1

0c65b25be63e2ee1d56c7c436d08797590c55b10
SHA256

3d868707ec0b957d63913fb6841ed1dae61cacaca88c18a9116146e24fa06f9c
SHA512

78d6e096fc4ec0335aa15b94398d3da741c4a91eef8d632127a9994926ce6738c4447cab711fea6820f4de2672479daefc9667daa87f6d607d7ce7509086cc09
SSDEEP

6144:NtfDwsjPThT5zL2oFU7mTag965KWwiojbvG7j:N5hVioagDEojbvGv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2e61e2ba4e0cca994accde4b2e1d6830.exe

Files

NEAS.2e61e2ba4e0cca994accde4b2e1d6830.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ