NEAS[.]c802a06b189866c78e62f35706455b90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c802a06b189866c78e62f35706455b90.exe
Size

2.6MB
MD5

c802a06b189866c78e62f35706455b90
SHA1

5fe36a3a490bb3d3f265c5971773300f84650c82
SHA256

66f1d5e6ca424aa0895a4be2a3f3e53a131b896f1a6ebe07f28a6d78649e371b
SHA512

4e186b1d6a837d6e5c990a7ca812557d6bb9355f7a8ec0f878c1d7c62ef4828adf32c0e924de5514962e025a201d953579134afe22f94af65cb727f95cc93be7
SSDEEP

49152:sWXWsDs9cyMqoG4Od3EcNltuGG7/1+iG8Qq:s+Wv/CGgcDtu3N+bq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c802a06b189866c78e62f35706455b90.exe

Files

NEAS.c802a06b189866c78e62f35706455b90.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 652KB - Virtual size: 651KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 28B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 616KB - Virtual size: 615KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ