NEAS[.]49097ae910a82f26a678bdbec8b54c10[.]exe | Triage

Sharing

General

Target

NEAS.49097ae910a82f26a678bdbec8b54c10.exe
Size

156KB
MD5

49097ae910a82f26a678bdbec8b54c10
SHA1

eea2ad4892783ae7594b6f0d54bf277cea2b3296
SHA256

c1a3521eb93f7844e1148ff69325611f81ea727f400dd656edd71a3de6723ac1
SHA512

ec9dd5a0d4b9a0c7bbc7fe5f34846885f99338776afd71a3cab5e62dce028ed411a626e95cffc2b4f38db5722d81bdcf49b72b9678c2b9be30358c35909df522
SSDEEP

3072:hs3o8A4M3riN6MhGkgS3PL6pb9t16n5OkhBOPC/z/Fnncr95971cP:hDeM7iNEkgiOb31k1ECjJq5Jy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.49097ae910a82f26a678bdbec8b54c10.exe

Files

NEAS.49097ae910a82f26a678bdbec8b54c10.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 64B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 312B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ