NEAS[.]db554e537de0c491c43024471ae307b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.db554e537de0c491c43024471ae307b0.exe
Size

1.4MB
MD5

db554e537de0c491c43024471ae307b0
SHA1

ab1395a1a5cd9c99fca35cd2e21e1a913b731483
SHA256

4c580591ba2c07372e323f9e164daf4acb83bc92ad85b280f956c7dc3947c221
SHA512

b58366512ef61bd0ce4f4a35213cc00b48be100d003518f9c6edbb62ac245df879ba666e2d356f7464048ef5f75610fa9739920070008a5291cddcbcf9387155
SSDEEP

24576:RljnOAqNSpcysmKC0yMtO/aXmVKd8RQuNO3sbS:aA8mnOC0X7XmUWRQuNO3s

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.db554e537de0c491c43024471ae307b0.exe

Files

NEAS.db554e537de0c491c43024471ae307b0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 836KB - Virtual size: 835KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 524KB - Virtual size: 524KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ