NEAS[.]f890008561d6268df4e91f4d14c9ec70e42bbb8f7af20fb68e368e542edebc16[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f890008561d6268df4e91f4d14c9ec70e42bbb8f7af20fb68e368e542edebc16.exe
Size

3.0MB
MD5

0c171ba7ac8a8f86d6312c9c6ece31a3
SHA1

b38fd59b39c50bb2ef59b643af61be93b29c52a7
SHA256

f890008561d6268df4e91f4d14c9ec70e42bbb8f7af20fb68e368e542edebc16
SHA512

7e1f7b56a2f8b71941f2e9ed4c55d1efe18df44d52fabe72ad5b5089c47f394c4717c0e597a15b963d3de38a4b1082316aa1afd261503a1ab82ca2fc000347fe
SSDEEP

49152:9//hPS2+XaJckVmZDWEBo0ttwvUI+lw88NK:r8I+y88NK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f890008561d6268df4e91f4d14c9ec70e42bbb8f7af20fb68e368e542edebc16.exe

Files

NEAS.f890008561d6268df4e91f4d14c9ec70e42bbb8f7af20fb68e368e542edebc16.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ