NEAS[.]0c0b250d328a90617826413300b46060[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0c0b250d328a90617826413300b46060.exe
Size

135KB
MD5

0c0b250d328a90617826413300b46060
SHA1

38aeb8baa1c4d7254683944417eb8b88bbaec592
SHA256

64ac6960ba53b81478895ac69ac81886d5326ada677de332470b1b334b2b3b1b
SHA512

b9f60f4e147f0fd6b466d023079498094b97e5ede248f0a7b7d698c69fab73dafecd3d98b7e25c0a357b2f800184746f2d0bac09b97767b63f2f314c6a60ff10
SSDEEP

3072:1xTqpdA3f6QNf2IPO4DpmWpAsfYbTOBoefYi6a9k20tAvscwg8mkW:v2pdqfv2IPOGfXf5ovWv7Og

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c0b250d328a90617826413300b46060.exe

Files

NEAS.0c0b250d328a90617826413300b46060.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 104KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 12B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ