NEAS[.]08b220363c75bdd3d10c1ffd2e121100[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.08b220363c75bdd3d10c1ffd2e121100.exe
Size

332KB
MD5

08b220363c75bdd3d10c1ffd2e121100
SHA1

f8ede2435596c262a3c2e31d1d4516c3fa77c90a
SHA256

e4f1b4f6a855a4358aadef1bd70601766c7db05e902734fe3677d50938f8712d
SHA512

f87e2dfeeea8ccd923ebbf109ba506d57d1d95f2b07eaf318d0b32c0b0e61fc377ee456e6496154b711d9db281adbfd71883557394af2e70ad3a6a34533782dc
SSDEEP

6144:lX7biLyEy/UrCjBUW9zvmcdkNkCauhbrE3L/bftR23SY2S:kGEqjzmokNkCauhbrWRRYn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.08b220363c75bdd3d10c1ffd2e121100.exe

Files

NEAS.08b220363c75bdd3d10c1ffd2e121100.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 52KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ