NEAS[.]b5d3a40557b6e6069c235188b0ef8690[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b5d3a40557b6e6069c235188b0ef8690.exe
Size

605KB
MD5

b5d3a40557b6e6069c235188b0ef8690
SHA1

1c01937ab534b4bde7e7f69a395ac64a42ff6455
SHA256

816a23c3d176f5438c5eeefd64cdbe0d1ec7b2ae71400c2c2bd15c8827f0ba7f
SHA512

1788d0206d2f2da5fc615b0ec0852a214eec0b13f83a264ac2f2b68bd477af36f4e145f00ddfa36fa5395e6cfee776bffab5cc6b4c92b2f7d9937c9fe8c0508a
SSDEEP

12288:bS2m/aVni/SZLwH8GHWOfT78YBr+6yAL5wClV4sWX7FE47oJXFhdf1:bniaw/SZLwBHWOrIYBr+6RSoVzaOw8V1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b5d3a40557b6e6069c235188b0ef8690.exe

Files

NEAS.b5d3a40557b6e6069c235188b0ef8690.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 556KB - Virtual size: 555KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.radata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

RC
Size: 564B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE