NEAS[.]2b0bcfca30101c8cce121c68caa8d6f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2b0bcfca30101c8cce121c68caa8d6f0.exe
Size

396KB
MD5

2b0bcfca30101c8cce121c68caa8d6f0
SHA1

649733ae9d70c31b3af1f2219900351faadcbef9
SHA256

8f1903f48015f01811e0aaa028c7632e6e02d7a7481e39311428b8cff44c8ab2
SHA512

b240f3e466ee1dbb3eee90890e493c92fcbde17be009701e9bcd8d277e90b3635f94b9178e31d999ce721141033b8ca55a8edbe3a3fb467a34ccdc83d29bc5aa
SSDEEP

6144:X731bdBaB+D1JN4pjLBVfrPMuMf2cHZPfgKT4S0W6SZUrE+3TyofmdJa/G5mzi:b1bXD/ilnf7MV2c5gKT0SurE22/7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2b0bcfca30101c8cce121c68caa8d6f0.exe

Files

NEAS.2b0bcfca30101c8cce121c68caa8d6f0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ