NEAS[.]aa492965095a8ad89ceb8278d914e8d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.aa492965095a8ad89ceb8278d914e8d0.exe
Size

228KB
MD5

aa492965095a8ad89ceb8278d914e8d0
SHA1

b57555f15001786f7dbb6b25801251c8b6b90501
SHA256

e68803a748a4276dc333264755175a01aed71041fa64bd5b0750722bee98bc1b
SHA512

e5ce67aabe5c4d64af33d5b5d700c15e326c550ccb11a4c61bab238c15cf86c8af34d25376fa64b343dd0e6fd6c97c076d4976604d891556c323f9d5ed9925a7
SSDEEP

3072:ZC6xRyfFP0o35cc+rp9iOgzIrJ5wxO34:ZC6xRydsS+CJmJSL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.aa492965095a8ad89ceb8278d914e8d0.exe

Files

NEAS.aa492965095a8ad89ceb8278d914e8d0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.reloc
Size: 45KB - Virtual size: 45KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ