NEAS[.]eda87eb46fcafb2147099e53f1c4a3bb[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.eda87eb46fcafb2147099e53f1c4a3bb.exe
Size

2.6MB
MD5

eda87eb46fcafb2147099e53f1c4a3bb
SHA1

2e9c7abb5658a33e65e264e33ac2b67e8bfeb424
SHA256

0ed2368065fe78e2e4ebd4f7ec93726503831ea20de8c679fa9af41bdb39f75e
SHA512

fbde287303b4bb452c31f90d42b8f5c3325b597931ebf5b4ad2761924f4f9ac6be17df0a9da5b3071d14b49b3cf3411ed997d8154b6540beae2445193986aa8c
SSDEEP

49152:a+R9lsk0TBt3AzLNG2tmeyhzgH3LE3cSJwxxtGLJ4o5fp:hRbD1OhzgH3LE3BJwj+J35R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.eda87eb46fcafb2147099e53f1c4a3bb.exe

Files

NEAS.eda87eb46fcafb2147099e53f1c4a3bb.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.lol0
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ