NEAS[.]b3228369baabac7cdeb2139d48b03a40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b3228369baabac7cdeb2139d48b03a40.exe
Size

424KB
MD5

b3228369baabac7cdeb2139d48b03a40
SHA1

b21f49962045a67118b1239c933f181ceeff59df
SHA256

53c9ed066fd3a8c697cd05e3161aac78944d74ea3d6ece18402d8eec7f9f6be4
SHA512

062e4d2b17497fbba7fed3033ca8cf0701796999a08ec2be9d489c0e1203126989ca8b11cf387635a6a8370655af87a81899a1a1ea3a99ab511fc0941bd54372
SSDEEP

12288:nJ/4ObrApys7RhT3ydm/ODWIT6YzBAq4letm:JQO4pyS/3HWpmYzKqok

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b3228369baabac7cdeb2139d48b03a40.exe

Files

NEAS.b3228369baabac7cdeb2139d48b03a40.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 303KB - Virtual size: 302KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ