NEAS[.]b24592ebc89a56a66a8021c0c704e460[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b24592ebc89a56a66a8021c0c704e460.exe
Size

499KB
MD5

b24592ebc89a56a66a8021c0c704e460
SHA1

d2ca69ef7da1a46a08e868ceee4b58baa1e7e78a
SHA256

0ed210407c9a0751b84fa1e6e9c11d6f04b7cdc06df2c429518a0166676acbdc
SHA512

25a3d3798f36574db2f8703410126fb7d18eaa461415b4bb2e7b41956aba535d61c16ac2d8476f6d5634da7a072b61a1d37958c2437e3ce31593e5ac0520aa6d
SSDEEP

12288:tehnaNPpSVZm72TFafJiHCWBWPMjVWrXf1vN:teh0PpS672TFU+CWYPMeXf1V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b24592ebc89a56a66a8021c0c704e460.exe

Files

NEAS.b24592ebc89a56a66a8021c0c704e460.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 276KB - Virtual size: 273KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE