NEAS[.]a2f9a512c34ee2d6d31749a0139d7470[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a2f9a512c34ee2d6d31749a0139d7470.exe
Size

1.5MB
MD5

a2f9a512c34ee2d6d31749a0139d7470
SHA1

f171a069ce4132d6e9a0d438adc64adf2db9f4da
SHA256

5da648a7cb669394d7147672b7613ba40ec261b6f7781571a37ae2b7462ed1d7
SHA512

c29623ae814384b2025a688ac7c353f771e535bf34b4eb83bc936b8615815f45f28c2ba1ccf4c2e2dd8ffdd25d6440068ad56a3109a328d87e9ae85eb77554da
SSDEEP

24576:aINWDSAwoXNtnU6wG7OMJnXJF2I6OSGnUWBAGGdUSanT/E1xN1JrmNByc:aSgtCiXJb0AAnoT+9rmN7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a2f9a512c34ee2d6d31749a0139d7470.exe

Files

NEAS.a2f9a512c34ee2d6d31749a0139d7470.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 999KB - Virtual size: 999KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 264KB - Virtual size: 263KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 34KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 20B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 146KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ