NEAS[.]08b4a7626fbfb002afdbc47337825580[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.08b4a7626fbfb002afdbc47337825580.exe
Size

564KB
MD5

08b4a7626fbfb002afdbc47337825580
SHA1

d25e0e2bc6449eea7070fe8c7c64e231d7f5ddc2
SHA256

b263812b704e8cb4e9f36aa9fb871410d635ca1ce482620bb9c3ed7418cbd8df
SHA512

a3462758708ae9b85f64efe8b7d65523fbd332f3be3a23b41cf3f71c4fbe7e5f62ce24c799cae61713e966624b9993660d4b56386ae2e1010a9fb944882c9629
SSDEEP

12288:FrMIztyCK5x8CBmn+RrNbEyWYa0Ie1vUxJF:zZyCA8CBmn+RrNj9ay58

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.08b4a7626fbfb002afdbc47337825580.exe

Files

NEAS.08b4a7626fbfb002afdbc47337825580.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

.text
Size: 448KB - Virtual size: 448KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.itext
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 19KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 52B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE