NEAS[.]449320e55289903d8b7743cfa8ab1420[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.449320e55289903d8b7743cfa8ab1420.exe
Size

123KB
MD5

449320e55289903d8b7743cfa8ab1420
SHA1

4c2098fb26b86d9ae79efc30146b755b9589ab9e
SHA256

3f71c7c3ff627302d852bc8de240a2b025718902ae82139cb025291a74420fb1
SHA512

2c6c869b9e404e8d53cc29efbed09515fa885ffdbcfac6edd89796b1839b20148873963ce1bd71777f0bda201033341987e7a2efcd5cd138b26b216b6207d888
SSDEEP

3072:lV2BZVPlFlnxClFvLLcs+sPDzGvxyjquGm3zA1PhDkKCP8mBj:bQrNFxwj9+UGvxuQmDA1RFmBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.449320e55289903d8b7743cfa8ab1420.exe

Files

NEAS.449320e55289903d8b7743cfa8ab1420.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 40KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 416B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ