NEAS[.]d0cee2d2592f635aadec6de8a5524970[.]exe | Triage

Sharing

General

Target

NEAS.d0cee2d2592f635aadec6de8a5524970.exe
Size

754KB
MD5

d0cee2d2592f635aadec6de8a5524970
SHA1

34f7e326c8d7d7b93d4b042226ff108206831792
SHA256

6ce5c8bfdab7a66679eff87a49b64486506f5231f614391720954c6d0e575a40
SHA512

ebfde87f6844fe5f26090dc48912adbd6d9918ac7ec0d84f3c22975f2d3554361822012e0d8c1ff6321d88c5c66b02ea77a7ab3b549f7eb15724ae7a30d436f3
SSDEEP

12288:GudN+hfkP6jhagPkd/DTHyjrSgxdenBko6TP9buyZO0dxp+++fi3LyiYrwIwTKxd:huyPsJ1xkG4C2laberdOKxc/eB2K+E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d0cee2d2592f635aadec6de8a5524970.exe

Files

NEAS.d0cee2d2592f635aadec6de8a5524970.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 429KB - Virtual size: 428KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 281KB - Virtual size: 281KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ