NEAS[.]bda1e12a9ae8ad03d2cd48a4f366c500[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bda1e12a9ae8ad03d2cd48a4f366c500.exe
Size

463KB
MD5

bda1e12a9ae8ad03d2cd48a4f366c500
SHA1

785d39fec9f0728c82331c52581c8a5c3de0231c
SHA256

95159042e828796ecec6b4cd528064e286478ed84a23efbf4b6206067d0cd865
SHA512

ab906025ab167b9a4de516cb7a71842f6ae0ba4b528a125e025e69b829f954d5b348b5c9e532e54f1d42d3b1411a01f682710457ff5f06bcdc72c9345a5c4dad
SSDEEP

6144:j2HRFGHrrhIEOwiO4PQ6hnJHLjDTOo1hsHTS5BtO8jdsPRwAoRDfJt/e7O:QFGi7O96l5p1hgTOPrGYDfJtW7O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bda1e12a9ae8ad03d2cd48a4f366c500.exe

Files

NEAS.bda1e12a9ae8ad03d2cd48a4f366c500.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 627KB - Virtual size: 626KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ