NEAS[.]ac77b0c1b1404dbb068b15e2008953f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ac77b0c1b1404dbb068b15e2008953f0.exe
Size

4.2MB
MD5

ac77b0c1b1404dbb068b15e2008953f0
SHA1

da87fae6903486e284c53cda8a5a827a014aa692
SHA256

29e9a3e8210260518b49b0824053e3adbd6524c10f84fd49671c0fa953f3540b
SHA512

98ee5c2f5fafb3c6d9fc3bbbb3522d4a59e5dba22630f051398f8571049c14719861c265aa7121d2ebc7db1ab804e6d070f9b1553656cbcaf4e125ec25f670d2
SSDEEP

98304:Fc//////pJH4u9s8FTPUClFkhe2HeS0xlf+3gpmCHITII5SvdV2v2vjVRCFEhON6:Cti2xluLeS0xlf+3gpmCHITF5yV7VRCS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ac77b0c1b1404dbb068b15e2008953f0.exe

Files

NEAS.ac77b0c1b1404dbb068b15e2008953f0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 1KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4.1MB - Virtual size: 4.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ