NEAS[.]00d22e0a19b9c329a99ee582f35a8940[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.00d22e0a19b9c329a99ee582f35a8940.exe
Size

2.9MB
MD5

00d22e0a19b9c329a99ee582f35a8940
SHA1

6332f49f9d70f6398fbba1ed5f91bbb59dac3605
SHA256

ad76c83767bf3111201da929c02a228c297f069de891595e7f1a522b32a64b44
SHA512

8c690afbfc4fe03374759cf3b53612ff0fa8f4ae83c60b6dc3722bb78ef8d2edd3e303d43dad135435ea136cb57a05dd46f27836c155705c3a18e6e0e8a2d8b8
SSDEEP

12288:K/7dTCL/Jaqc0lhYXrqNH7J9DMrh4DrR9zYD16b0qw6v59osF:EdTq/Q6wrqNbPYl4PFb0hQF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.00d22e0a19b9c329a99ee582f35a8940.exe

Files

NEAS.00d22e0a19b9c329a99ee582f35a8940.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 228KB - Virtual size: 226KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 952B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ