NEAS[.]58ab61960b08ef41451b9e0d7f22f0d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.58ab61960b08ef41451b9e0d7f22f0d0.exe
Size

475KB
MD5

58ab61960b08ef41451b9e0d7f22f0d0
SHA1

e5fe1ee5412019ef57558161475377e3eafc1812
SHA256

66f9a59be781899cfde030532e0db9a33814f8155a1abf7221c557d4f7c90b48
SHA512

4649e2d24b3053f153a2197241ee1ae0d3b0f0e551d5979272808570a8284f99519d558d55198d81a42dc08f38f936826df1ea087e9fd274101c7a145bf7536c
SSDEEP

6144:pjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPTnOK4JKElbX:nRDc3yWDNU+YUznzNjElWaT07NQtbX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.58ab61960b08ef41451b9e0d7f22f0d0.exe

Files

NEAS.58ab61960b08ef41451b9e0d7f22f0d0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ