NEAS[.]3005b9266c0a7ea6c4051020b404db70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3005b9266c0a7ea6c4051020b404db70.exe
Size

4.1MB
MD5

3005b9266c0a7ea6c4051020b404db70
SHA1

268114b979e655378c9df08f6869ddec38846131
SHA256

27b202cf831d5c1d8cead0588ac41bfe17b0941c7ac3051dc12da6393d2a6739
SHA512

d8cf32b6bbb5b338b22f3483fadc6d01bbb912670b0bd5e085416225605a5988d5ac96ec022b635cc243037a57678897a973133982d0abc6dcb8ad44c4637afb
SSDEEP

98304:pKPF3/OQ+lkIfWKdGUQnT1Jk6yTpTGVHCMxwhpiTCId4AeGkTj:c5mQ+bfOZaGkMahpVAeBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3005b9266c0a7ea6c4051020b404db70.exe

Files

NEAS.3005b9266c0a7ea6c4051020b404db70.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ