NEAS[.]eb49169a9ddb9249526e2d62ce5e6f00[.]exe | Triage

Sharing

General

Target

NEAS.eb49169a9ddb9249526e2d62ce5e6f00.exe
Size

74KB
MD5

eb49169a9ddb9249526e2d62ce5e6f00
SHA1

bdfd4e5995e469b47bf2d9e121cbf0494766cc1d
SHA256

a12fb31471d8bdffebfe390f2c4a5caa195313927a4c273020fbe5ff9c098dd5
SHA512

76352ca7f120d4b7219fb61e7e7d5ebc9f6177b580484c1921398e80674e31e20b7673e1f97a47752ecb0556290d0c808015591637a24e2ca82b842820c6c4e6
SSDEEP

1536:GF5qNgn/Y8bCbz76f8yctmTQScxxXxwkcg1cbrZhXNrbNTf:AOvWf8vm0VfHhiV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.eb49169a9ddb9249526e2d62ce5e6f00.exe

Files

NEAS.eb49169a9ddb9249526e2d62ce5e6f00.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 122KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flh
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ