NEAS[.]0b8d0bdb696a79799fd6f359c94a4490[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0b8d0bdb696a79799fd6f359c94a4490.exe
Size

8.6MB
MD5

0b8d0bdb696a79799fd6f359c94a4490
SHA1

7a4cdcfe68c08419bcb1f2684cf19e1a68cb5d35
SHA256

44b65efe3e4e201049defdfcd4b2f5679b3fc1fcc8ba7aa87b2eea3e91b12a52
SHA512

b1d2f4eddc42a337e40773c5669cb1e66ab01331e206fc93e034c3b53711fa11674ff35215715e7625ce2ab26b7490484f09a468d1c55f4ff706192aec745dff
SSDEEP

196608:dt+yBowmlZh4zW89zmVLV0/BuqnMTh8ckvLRmbbo1KJzG9K:3VC8lmV50gqnM18ckjSbGKZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0b8d0bdb696a79799fd6f359c94a4490.exe

Files

NEAS.0b8d0bdb696a79799fd6f359c94a4490.exe
.exe windows:1 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1024B - Virtual size: 588B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ