NEAS[.]7bb8d5ceb096c29f7bd4c43e0a7812e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7bb8d5ceb096c29f7bd4c43e0a7812e0.exe
Size

270KB
MD5

7bb8d5ceb096c29f7bd4c43e0a7812e0
SHA1

1253caa80250c8d3656f7cbc10677b93f04beadd
SHA256

e8744ed79ea0e8ce46f2fa9811e79b35dba021d192f8c448f9641ccf877aa7e2
SHA512

e5ad1ffd9077206ec1b46c2f64c44a854aad61ebbcc03d2a0f976331d91cc9a50521d9fa62cac88ee0b7bfee12459c0f35103e457b19a14eb55723a1265c5d10
SSDEEP

6144:nIyFESWu0SWu86jYYFg9e+eTStqlIyFESWu0SWu86jYYFg9e+eTSs:IyW6jYYDSJyW6jYYDSs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7bb8d5ceb096c29f7bd4c43e0a7812e0.exe

Files

NEAS.7bb8d5ceb096c29f7bd4c43e0a7812e0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ