NEAS[.]48c065c7011ccb3a51c93700ab0a2e70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.48c065c7011ccb3a51c93700ab0a2e70.exe
Size

299KB
MD5

48c065c7011ccb3a51c93700ab0a2e70
SHA1

77116f8ea3865259913f8e50c7bc8022f90720a8
SHA256

9f0a8847ba78aba9b3963580dbd205d68a74f2618aaeeda07658bc094c438498
SHA512

9b2116611f49edd3e2550c57573dd5699ee1e07455587fe8bc02e5b17983df465cf4995f245ce0f1a37255b7f61d7cc4fe842c7cdef51899dcab97909f50b269
SSDEEP

6144:BsQDA8P2nz3COo7xBZYcrHy9NOztO0qGbRBYnlhQ3q:B1DA8OkOcwNOzTqGLY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.48c065c7011ccb3a51c93700ab0a2e70.exe

Files

NEAS.48c065c7011ccb3a51c93700ab0a2e70.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE