NEAS[.]bb19afc1029b916d63828e5db646ef70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bb19afc1029b916d63828e5db646ef70.exe
Size

65KB
MD5

bb19afc1029b916d63828e5db646ef70
SHA1

3fd1d5bdade9033665dc38875577cf86989cd2e4
SHA256

f897d1a6b3861f76ad9dac8753289dee6658c65597c860a9de61b62b9b62d0b0
SHA512

6bc2ca40c6b83ae568be943016a28e7658ec0cde5b513910a723ea6862d42ccb6a1f32f87d6aed40336acfbfd1a7cfc748b449266eba39204b2a3b939208dda9
SSDEEP

1536:iV2KpynwWWaMty99Qp2DZdCCKHDVffhshlrsRLzVeqr3:iV2bw+9Qp2DZAp+lrstt3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bb19afc1029b916d63828e5db646ef70.exe

Files

NEAS.bb19afc1029b916d63828e5db646ef70.exe
.exe windows:5 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Sections

.text
Size: 583KB - Virtual size: 582KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 30KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE

data
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ