NEAS[.]2a3d56c5d5bdad773ecc33a97d9ebe00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2a3d56c5d5bdad773ecc33a97d9ebe00.exe
Size

2.3MB
MD5

2a3d56c5d5bdad773ecc33a97d9ebe00
SHA1

456c9c59d1f7726c92192ab4c8642153c2dd829f
SHA256

efa63d54a84a5b3468294cd217d4cfd7b644d1a2feb17b274b18408c613032f9
SHA512

e1fbd3211de718efcadf9ff23d7d9369036531e7f9dc717d6663b0da77491d858185b4972db3693fb5892b17d63b6e564fb22c66fd05a992a06546907db1727f
SSDEEP

49152:+fiL8MM422CkNIjNgxC3vNleR9Or7+tGBwDC5v6xpNKVcrqdgBq66cDSAK9LBoMV:+fGM4h30mKtAKfoI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2a3d56c5d5bdad773ecc33a97d9ebe00.exe

Files

NEAS.2a3d56c5d5bdad773ecc33a97d9ebe00.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 14KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 24B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.vmp0
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 337KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 126KB - Virtual size: 125KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ