NEAS[.]c016c2649684722dc1e308e080f1739f3314927b3c022f63ad7da9caacd79a63[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c016c2649684722dc1e308e080f1739f3314927b3c022f63ad7da9caacd79a63.exe
Size

2.3MB
MD5

fc12e26f2204c29adb062b9844d32f53
SHA1

82666a2574208abcc4c63a076d90ea7730fad526
SHA256

c016c2649684722dc1e308e080f1739f3314927b3c022f63ad7da9caacd79a63
SHA512

f0a1d85c5cf28b1fac4c79152f1d048282ee505339bb4f7bc333d9fe2ff9b7a8d51fb75a91c4bbd1945ad79e3dca86142329ad3df01b935cec8af309ccadd670
SSDEEP

49152:zmUjlGU/DDjqvOS6iy3iWOY+YLqaLOlTprbs69V/:zH3cy3im3L6Zs69x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c016c2649684722dc1e308e080f1739f3314927b3c022f63ad7da9caacd79a63.exe

Files

NEAS.c016c2649684722dc1e308e080f1739f3314927b3c022f63ad7da9caacd79a63.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 355KB - Virtual size: 355KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 3KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 66KB - Virtual size: 66KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ