NEAS[.]298baa065dca5b15e70c7734de52f470[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.298baa065dca5b15e70c7734de52f470.exe
Size

4.9MB
MD5

298baa065dca5b15e70c7734de52f470
SHA1

3e9bf401d483162da45f96a7319e15df75084976
SHA256

17d4595562fd9a092cbc627b9df872c15d69e02d7a058dbff10300e41ed87544
SHA512

81f78fa3edc37c65aae9bf948b83bf6ed266ae6c7f250aabd523f7bad2ada49d2580d9eb7e1dbb44da2b017f56dd6c20a724802a12733d0788e7bff072f77a17
SSDEEP

98304:kzoSLA3T8gKYgac4qpJXJe1mNmZe0BZv6TXhU1+kW0uxVUWKSRPeSeU0Zt38:kzo08TXKscY1m0RZv6F8S0uxy7SRGSd7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.298baa065dca5b15e70c7734de52f470.exe

Files

NEAS.298baa065dca5b15e70c7734de52f470.exe
.exe windows:1 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ