NEAS[.]a19ab9caf083ee9e2f9ec6ccd8d62620[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a19ab9caf083ee9e2f9ec6ccd8d62620.exe
Size

88KB
MD5

a19ab9caf083ee9e2f9ec6ccd8d62620
SHA1

b2099aaf06e730d7ebd275837f70555f25dc206a
SHA256

f7e18da8d5339917ef8133466a4dfce19795ac3672faf5d30c9642241b72f62b
SHA512

d34c0ab2aa364e486398f88dd2c3e77f9dfcf975687cd95a0b18f89518bee0d05acf4134a2269b733ddf01b8e2f1acf27c7ac49c58389d1eb9270919ae9f13bc
SSDEEP

1536:qaiqH1s+kCtrA2UMT0mTFibDKa1cNNm4:n1B31bdBob2QIN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a19ab9caf083ee9e2f9ec6ccd8d62620.exe

Files

NEAS.a19ab9caf083ee9e2f9ec6ccd8d62620.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ