NEAS[.]NEASa3a7ca57f087ab44c89efae3e4f54fb0exe[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.NEASa3a7ca57f087ab44c89efae3e4f54fb0exe.exe
Size

1.4MB
MD5

a3a7ca57f087ab44c89efae3e4f54fb0
SHA1

6931fe4b73dc5edb7ba6eaebd0cec65e2d2fc30f
SHA256

6bc7221a23586598465bb48f981a49c90c92c29101602e3d4e171a8312fe71d0
SHA512

3c3c16b410a55d932555a56ca1ecab28be67b070a3aed334aae0bec906bc645abd4a21d10676f91fa936122f34782649fbb0bcc176176c1becf67c1a756691a9
SSDEEP

24576:EnsJ39LyjbJkQFMhmC+6GR9OWpfXEX9rkPFjHpU:EnsHyjtk2MYC5GRTs9rkPF9U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.NEASa3a7ca57f087ab44c89efae3e4f54fb0exe.exe

Files

NEAS.NEASa3a7ca57f087ab44c89efae3e4f54fb0exe.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 615KB - Virtual size: 616KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 57B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.code
Size: 664KB - Virtual size: 664KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 500KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ