NEAS[.]6d5bc8ca7861120c02ab817b67209d00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6d5bc8ca7861120c02ab817b67209d00.exe
Size

2.1MB
MD5

6d5bc8ca7861120c02ab817b67209d00
SHA1

0db4990197dc6a40bc3f48057bd0c3ac4549cb16
SHA256

22baad037050673da547fc44a62099c164cc7d4ae8fbb161771bc17222beaf3f
SHA512

6d978822f2bdcf44227b9ea9c5282994f847646a73a1246282a973b0452ac4abeb369286db495e7a89af93b022ff3069c5c9910170b88cb06f7b0c954985e7d7
SSDEEP

24576:knsJ39LyjbJkQFMhmC+6GD9q4T0Xex+oc7Vl7kx8SxdtJHNkpdjx:knsHyjtk2MYC5GDc4T7x+/J5Ytcdjx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6d5bc8ca7861120c02ab817b67209d00.exe

Files

NEAS.6d5bc8ca7861120c02ab817b67209d00.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ