NEAS[.]d34c9e759dbb7218835dc9895640bc80[.]exe | Triage

Sharing

General

Target

NEAS.d34c9e759dbb7218835dc9895640bc80.exe
Size

529KB
MD5

d34c9e759dbb7218835dc9895640bc80
SHA1

710f0cb8d225c45eba7244867eca829e8bb8db95
SHA256

410733d49772f3d128b353d9d732c18f3eeaf8e448b428573a7c4ec769e17564
SHA512

e39979657f23c6b72c01351dbc5fedbee6e71f2b7aade7e515bce9ad2c097ad42c352618d3ea6b8af569cd487f7492ea408ceeb0c50547c5ec2790400247fef1
SSDEEP

12288:xMOzTVTacEFGIgf65/8Ju2/S75FZh9BBjvrEH7e:xnzT8SIeJu2QhdrEH7e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d34c9e759dbb7218835dc9895640bc80.exe

Files

NEAS.d34c9e759dbb7218835dc9895640bc80.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 45B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ