NEAS[.]811a9512e8d3c180eeb3bb05cc65e900[.]exe | Triage

Sharing

General

Target

NEAS.811a9512e8d3c180eeb3bb05cc65e900.exe
Size

534KB
MD5

811a9512e8d3c180eeb3bb05cc65e900
SHA1

ec8677e953377c0e129c249d502172a229d9a68d
SHA256

8d46497a37c751adefa7b3439726175210ca74e4750fa8502e149a97272bc1bc
SHA512

9bdab80bfb3c5ceefb1ce406172c61ffb0f0f3c60aee8328d15369cc53983250f164aa5dbfcd8921781422a503bd200f008696fa0f588671c3db38c1762ef14e
SSDEEP

12288:eRmdh3rCRX7uEjOerm8TujTEGppG43pUWmA3f8qv:F3OACO+zc43WmA3B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.811a9512e8d3c180eeb3bb05cc65e900.exe

Files

NEAS.811a9512e8d3c180eeb3bb05cc65e900.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

MyZip_AddFile
MyZip_ExtractFile

Sections

CODE
Size: 458KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ