NEAS[.]18f435b9a66b2c38a77530e8238abf40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.18f435b9a66b2c38a77530e8238abf40.exe
Size

416KB
MD5

18f435b9a66b2c38a77530e8238abf40
SHA1

20e2a764091908aa2b2b751181ecf94ee42ab1d0
SHA256

4ff293bfb2b103736d6c596535f785f3840410547ea35c2c90d6b01d4d740ecc
SHA512

0c1a38847ecb66685a2ca3953dfe2df1947c1b035d654faec45113893e27ac809a998c5a689f3bfb09603f9af88dac7b41d23961f5067b94f851b363e8ada1d7
SSDEEP

3072:SePgCctxGv4QcU9KQ2BBA2waPx2tmolVS7HF8haJ:WCctxGsWKQ2Bx5xmpSZs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.18f435b9a66b2c38a77530e8238abf40.exe

Files

NEAS.18f435b9a66b2c38a77530e8238abf40.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 152KB - Virtual size: 150KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 145KB - Virtual size: 148KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE