NEAS[.]1373b5bda2c84be3d9bb3653c9eccef0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1373b5bda2c84be3d9bb3653c9eccef0.exe
Size

337KB
MD5

1373b5bda2c84be3d9bb3653c9eccef0
SHA1

fc91f767e41224eb3797505820d1fe3e6ebfa229
SHA256

3687d18d98477d1f8958825d275e7639d0734da9515d624cd5fbb7a1b500696f
SHA512

d103010e4af7dc870a4724e6ffb12eb05559bdfa752ddf5cc0da884994f6ba1825476b812fad5d1410390a95447464ca007a749cbba4031323e7ae739341b359
SSDEEP

6144:w731bdBaBJg7mXZd4ueQajkqJGwTQ21inA8+sBZVnjG/6hzR+KtlBhIKCQyRlaNa:i1bceQKjGwRgA8+sBZ04d+k8bRlPUo

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1373b5bda2c84be3d9bb3653c9eccef0.exe

Files

NEAS.1373b5bda2c84be3d9bb3653c9eccef0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ