NEAS[.]a5b6cabb7e76beceb196af8c647033e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a5b6cabb7e76beceb196af8c647033e0.exe
Size

2.0MB
MD5

a5b6cabb7e76beceb196af8c647033e0
SHA1

ffec28e42641f14aa41f3f79761d0d332b77d2d1
SHA256

5782741a5fd7fe1e0f38d9f8401a5040c25f88fc7596ff625ec12e631766b467
SHA512

98197bfed025256aaa92090c54bf3a1712f20bd0760f264ad5b7c280bfe6e6419ba303036c4b796a41bdcf7e6386b6e38b8569377bfbedac15845876acb90429
SSDEEP

24576:a0ZTQ1B13STQVW5Amn+N8DUAVVYKL30N8+sYo4/reGxRF6lBspYDhxyxdVEqnzEB:a0ZT4dmsuUAvf47ZHKyx5zEuQdb5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a5b6cabb7e76beceb196af8c647033e0.exe

Files

NEAS.a5b6cabb7e76beceb196af8c647033e0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 13KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 130KB - Virtual size: 130KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ