NEAS[.]c108ea371e0c01d0066480fb146f8790[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c108ea371e0c01d0066480fb146f8790.exe
Size

749KB
MD5

c108ea371e0c01d0066480fb146f8790
SHA1

029dd3cb3f38111b0c9fb19d2181bd8fed3ed837
SHA256

d4d87eaff1fd3dd911e0dcc181927ab98c5584aa344104f0702df6e8f2c67b8a
SHA512

86309df290ffe3db48b0ee437296747a4f1c815b081113c6ae994cc870d40c16ba5f9f0874fae5dbe10bbfb5f5b158a4f9680719a302ccd2ad1274152651176b
SSDEEP

12288:Bpy62BiIxmOvPuUk6arwRxonAK5i0MV+R9wiNc/74eT5PaRGAKaxUc0NB9KOG+bU:u62BiIxmOvPuUk6arwRxonAK5i0MV+Xd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c108ea371e0c01d0066480fb146f8790.exe

Files

NEAS.c108ea371e0c01d0066480fb146f8790.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 644KB - Virtual size: 644KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 7KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 35B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hackfan
Size: - Virtual size: 4KB

Size: - Virtual size: