NEAS[.]c18a3a57f2592b68ce23d461d0aaa5a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c18a3a57f2592b68ce23d461d0aaa5a0.exe
Size

4.2MB
MD5

c18a3a57f2592b68ce23d461d0aaa5a0
SHA1

8c4132e43f305ceb10166a2e356b162bb2b0d9c0
SHA256

41fdb709632792c770ccf34f85d23499eb2e7b7a0380779047f94b92273e3ba5
SHA512

c8e787ae58382171c1b4200ee0f4c85b189db34abb76b3e633a86c8ab3e00525031c94982b44ca509b64e9a6f8e9a6123663dc6a71bb0d7b0c56ed2fc87de8f1
SSDEEP

49152:+RaVw9BCU0i7ShFkeCjX9/kY+pkbFT5hzjNgIPlvEQncvij7Z6chT:+EVw9F7OkeWh9bjhzj27QVbR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c18a3a57f2592b68ce23d461d0aaa5a0.exe

Files

NEAS.c18a3a57f2592b68ce23d461d0aaa5a0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 698KB - Virtual size: 698KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 9KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.!rc!
Size: - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ