NEAS[.]4d955e4b94d23d708c18a5244a133970[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4d955e4b94d23d708c18a5244a133970.exe
Size

3.0MB
MD5

4d955e4b94d23d708c18a5244a133970
SHA1

0a87b2920288f068e05d62053be618199361e7ef
SHA256

10edf53f1520418a11b0cb3300553517a5b6f4d3fe1adc90ef8c432436d2d236
SHA512

3db8ecbbc685f01d48a4ee290c0e3af43ad021c2114af5d8e6b5fb2ae2f2d962d388e7793334df0fbf32e01797497a10c73e0f39c457b1b88b30ef7af4c694a6
SSDEEP

49152:pZINO9Wp5UON4jvCh90mLI5TbMtjmUL0kpj7bmZfUQmcZY6sKsir3sdj8PjhROX6:v5y3KDI9pKALo5UnENsKsiQ6NJj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4d955e4b94d23d708c18a5244a133970.exe

Files

NEAS.4d955e4b94d23d708c18a5244a133970.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ