NEAS[.]c0b8b284e7a000fe739bc7e9a2939060[.]exe | Triage

Sharing

General

Target

NEAS.c0b8b284e7a000fe739bc7e9a2939060.exe
Size

124KB
MD5

c0b8b284e7a000fe739bc7e9a2939060
SHA1

87c9d38d5a538874c17f2fc432aa0af40bd9e922
SHA256

76b5e1c849b1e8fdb25103327305a682c57b2c9f4296022ba3d59a529f451670
SHA512

65a4fef612580c848b5b331d559128a1e1c03dd8f44b9c82bc1c6537504416c640a78881ad5aa02c59f197860fbf78dc92b162dc7adf74a34cff0f3a952296d0
SSDEEP

1536:0Wok/m2fnpWHn1XWT53gB7ruXri9hDW4NOzRZICrWaGZh7i:0fk/mcWH1Wlyei9hDW4NOJrWNZI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c0b8b284e7a000fe739bc7e9a2939060.exe

Files

NEAS.c0b8b284e7a000fe739bc7e9a2939060.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.htext
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE