NEAS[.]0db3de15c8448fd417c849a679b92c90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0db3de15c8448fd417c849a679b92c90.exe
Size

183KB
MD5

0db3de15c8448fd417c849a679b92c90
SHA1

b7201b7db6d7b83cffca5ce341f52bca9b4b0541
SHA256

0999eba4c68d2239e4165184f64fbc58e05e818d747012061b6d2223c22337bb
SHA512

38a147c17bcd395722aa412f542c0e55ca7b48dac976480957cc494ee963b12d1b00a3795a4bf57f9427c14b11b4b9f1d9950585dcabbedc879d49ad9a05dd15
SSDEEP

384:E0GRKkFyeItGRKkFyeIZ2mmCgx+cLsaCgx+cLswPNPNM4HL1+ZQ:qKVeIuKVeIaCgx+qsaCgx+qswPNPz1D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0db3de15c8448fd417c849a679b92c90.exe

Files

NEAS.0db3de15c8448fd417c849a679b92c90.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 227KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.wixburn
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ