NEAS[.]89bba50054ca6a7cf37840abdcb10570[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.89bba50054ca6a7cf37840abdcb10570.exe
Size

396KB
MD5

89bba50054ca6a7cf37840abdcb10570
SHA1

cae16ce6aa88c655e80f54ae52d491355f4ed5ff
SHA256

5339f693a2f2babcb05df8af787391724730db1e7f8320c87276b089890ce615
SHA512

9b022d66e18a29c030dfe2a370dea29e048ffeb93b563624f43342188f4f80d780c2de1dcef1c0716f47da1c14ee4cb104c3b913216923d10b05e4f0c0107276
SSDEEP

3072:nVMfMIbIaw3J9et1G02GI0jJR+BC3K5eqU+BC3K5eqYroGOE9tog:yfMmMEtU10N7K70K7K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.89bba50054ca6a7cf37840abdcb10570.exe

Files

NEAS.89bba50054ca6a7cf37840abdcb10570.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 126KB - Virtual size: 364KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 342B - Virtual size: 342B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.reloc1
Size: 441B - Virtual size: 441B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE