NEAS[.]b8fab59c207af03d1b5d8bdcd98cf2b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b8fab59c207af03d1b5d8bdcd98cf2b0.exe
Size

264KB
MD5

b8fab59c207af03d1b5d8bdcd98cf2b0
SHA1

30943533c0d2fec52c5466c7f4fede69e51aab48
SHA256

e2c32bf3ba5d2e9c1ccc8ab5d69459504c9269805cc8e5e5886eff8c203a840a
SHA512

c1086248e9045b2b6c267bc87145d4d242d55bce7234d655934d4f2b3b6d4ded2a89923dba3249f939ee2a2f9fb26d8d474e04319bb62b01041554d213113a3c
SSDEEP

3072:mkT7BEO/cdR3VwWCMpp0Bsj5xcD35d3bjPnzgTWGp+VYAlK6U8:vT7fcdR367Yp0Bq5SVvqHAlK6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b8fab59c207af03d1b5d8bdcd98cf2b0.exe

Files

NEAS.b8fab59c207af03d1b5d8bdcd98cf2b0.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ