NEAS[.]70244750623cab6a9f29a66ce6b6aa20[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.70244750623cab6a9f29a66ce6b6aa20.exe
Size

3.2MB
MD5

70244750623cab6a9f29a66ce6b6aa20
SHA1

c37c4275169f15d7841201dcb32c40e8f080fd81
SHA256

8a83093a93b93c623e49ab784fe6e1cd91d8c80d9fd440bbdc33ac67641dae36
SHA512

98c1aaa89535ac5dca2f168e71c0bd00ea44847070e48c4ee25b0ac56a62384d55c65581356267d642260ffeeb019bf3645f81dc63c5368517b27349a10629c3
SSDEEP

98304:v5y3KDI9pKALoeqhunndqhHSQJsrgTv6QPNzkD:v52KiK/e7nsHSihD6QFzA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.70244750623cab6a9f29a66ce6b6aa20.exe

Files

NEAS.70244750623cab6a9f29a66ce6b6aa20.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ