NEAS[.]c4474846be44c178879a873234abf500[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c4474846be44c178879a873234abf500.exe
Size

4.3MB
MD5

c4474846be44c178879a873234abf500
SHA1

fcd83f5c85ef5352e7cd631b4bc6edc03a4769e5
SHA256

dd885db87b75faca36fd8fdc093562b832319cca2c0e88de83e53fa9a474baec
SHA512

a2afa41efaa636ecb74fa568b40ff1f19e5d92c3f3817816fb8784ab5c4a53394065845a41f49487d8198a7ca1f7dd48fc0987ece7f039b5bf0716f77fa464ff
SSDEEP

98304:Jnsmtk2aPl6kXKEAQWLojrDDX+eVlw9l9Ztevu2UO3a:VL3kXKmVjiezwpKvuyq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c4474846be44c178879a873234abf500.exe

Files

NEAS.c4474846be44c178879a873234abf500.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3.7MB - Virtual size: 3.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ