NEAS[.]1aed725d686f3a85d7d833a984489010[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1aed725d686f3a85d7d833a984489010.exe
Size

6.2MB
MD5

1aed725d686f3a85d7d833a984489010
SHA1

c9d2c1d9300e53ef986dbe41b23318c28f6ff8a2
SHA256

eb7434f4877f018a518873ac4a51306328d80e24e56dc8f040cb66b876958733
SHA512

e9da1dd1fdd2075bc82568985b670d32f35620bab7c460be6f7e15daab6023ce6050fbcb61afacd4979db436e918cc0ee02c9f0e0bc17bb17c1a74ff3da894db
SSDEEP

196608:0O52+fgp5uqIPcly17XADWpS+CopQ1XZYu70fA:0OQ+OubPPkDWDpuyu70fA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1aed725d686f3a85d7d833a984489010.exe

Files

NEAS.1aed725d686f3a85d7d833a984489010.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ