NEAS[.]72c11173468b5a2349a518135db6c6d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.72c11173468b5a2349a518135db6c6d0.exe
Size

90KB
MD5

72c11173468b5a2349a518135db6c6d0
SHA1

bc99c4904aaea4cbd547ded3a33f02214a54b6b8
SHA256

4162d6547d6fd9dcc80d806a52d0a23c88f98dc064dfcc43e3f79f4a563f68d3
SHA512

06a559f824bac52d76ecad10c3a8333b7f739e48661b7db7c8657a2c04eac3e5c7541ebbd54ed579750ed988c0489738489f9cd86910d7adad17f901ad11e469
SSDEEP

1536:E9wvQUreUbyzsB+2myhzT7hO+oZk9JSY+A37feaCMJDmYsLIb4PvYqHB/AdGi:0A/yzn2myhzo+oW9JSDADeak7dJHB/Ah

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.72c11173468b5a2349a518135db6c6d0.exe

Files

NEAS.72c11173468b5a2349a518135db6c6d0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ