NEAS[.]038d766e92bd7ab7e74a30024a238ea0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.038d766e92bd7ab7e74a30024a238ea0.exe
Size

647KB
MD5

038d766e92bd7ab7e74a30024a238ea0
SHA1

60e07f1f8f211876cc2a59b449d4abb3d9324da9
SHA256

0774001945a3195529f52397722513241548fd55bb048aaf0260167bb0ac511c
SHA512

a57bea78f79eaad708b71fbc8a4c1bdf592d443162cba993ae4c25e00f87dfdadbf7b604dc64bb8e0cb1263a449abbfddd34c69b6181de490bd820727f0717fb
SSDEEP

12288:shWW5Uv4MmIuNoPfoBy6E1mHsoCoehzRzx8K+Mm3UL:E5ctmwx7mlRevzKK+Mm3G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.038d766e92bd7ab7e74a30024a238ea0.exe

Files

NEAS.038d766e92bd7ab7e74a30024a238ea0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 128KB - Virtual size: 470KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 3.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 473KB - Virtual size: 473KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ