NEAS[.]10fa976229429956070b1c3f04e245e1[.]exe | Triage

Sharing

General

Target

NEAS.10fa976229429956070b1c3f04e245e1.exe
Size

6.9MB
MD5

10fa976229429956070b1c3f04e245e1
SHA1

6210538cbbd9c9638541ee9afc04e82f6f23017e
SHA256

694e96dc16114b2413c442ef8ec159f3a03e2e2f609785e63054c3b5e2758b4d
SHA512

ec947abb4cdf58390ad41eb47d2e066394d6e4a654f8b2c3c3df0c6c93033b5d1f8b770506311b1768d7fdcb8824e520d49ca9c0b1b7eb7b91a5d5a36f2f4e07
SSDEEP

196608:bf7HTjPBz4KkAYcDz7yhGbbRZvZUE0F6lagttgw:/Hv6yprvRZeGPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.10fa976229429956070b1c3f04e245e1.exe

Files

NEAS.10fa976229429956070b1c3f04e245e1.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ