NEAS[.]0c46ac9d25de0d28e94ec9d061db3180[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0c46ac9d25de0d28e94ec9d061db3180.exe
Size

3.2MB
MD5

0c46ac9d25de0d28e94ec9d061db3180
SHA1

5b752ad7f33c8d85f55bc1470c12240cf20f0f89
SHA256

b5b09ee268408e6daa0f81982f4f0a7f946604068a2a5b020ac1b03433740788
SHA512

0e5ac8286819724c3e6275b58ce2176c73e769ccf8c4ea9cae94ffad5dd0f7b4ca9669707da3c3b315e787f31fe5e98dab637187de01d8d0c08b4bdd7d12242e
SSDEEP

49152:DnsHyjtk2MYC5GDWuVcthgblxoLZoffea+Zadc6NNxrvEd0z0D6QLmaeogz:Dnsmtk2aevf2Za9/xjEez0O0mzoS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0c46ac9d25de0d28e94ec9d061db3180.exe

Files

NEAS.0c46ac9d25de0d28e94ec9d061db3180.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 614KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ