NEAS[.]d2957bd64cc393bab85d076a45b366e0[.]exe | Triage

Sharing

General

Target

NEAS.d2957bd64cc393bab85d076a45b366e0.exe
Size

80KB
MD5

d2957bd64cc393bab85d076a45b366e0
SHA1

69aa2d7ef9d1eb9a46ac10cb6b3b559b23904598
SHA256

4e4b13ae86d502f41ad528e66c3f6ed6ef65c736b620c4383103109d3bd57f48
SHA512

fc8d9c99e17061acd12054e866763cf9a6bde4dd63988b118990a744406c48e9ae0f444e4ac7853d28ea9fbc2eec44da9d1990fdc4f274ae6339e4558973d27e
SSDEEP

1536:WklqZEg15i1qf5VirvqDiRVY8v2QfKrXyL3XWf74E+YpWvd:W3t17LiWDiRVY8voXm3Il+YpKd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d2957bd64cc393bab85d076a45b366e0.exe

Files

NEAS.d2957bd64cc393bab85d076a45b366e0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.didata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ