NEAS[.]1c1b57eaa1382831fc1d7005c151b860[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1c1b57eaa1382831fc1d7005c151b860.exe
Size

264KB
MD5

1c1b57eaa1382831fc1d7005c151b860
SHA1

f8913ea6217f1be616607c8037fdcf068e42e451
SHA256

c2f04b9bc8b58b05072e69b9766cf34c3e86605bd4ab1d068b10ec192950bad8
SHA512

d08425772de4120622db7a4b0d428652afc06dffcd96400a071a053f55b2f8b28c2ea8715eee77b595027b52d510a6eb920a72ef4b570a175f9279685efc6017
SSDEEP

3072:1+0ZtWx4Re7SVcWatcYSNAigtDwiuAap4gZAM3jqus2WUQu6K6U8:FtWxWe7SOJcZmigtUiuA6jeusRu6K6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1c1b57eaa1382831fc1d7005c151b860.exe

Files

NEAS.1c1b57eaa1382831fc1d7005c151b860.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ