NEAS[.]d9b7ff304ab48bcca2e67ef276c53eb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d9b7ff304ab48bcca2e67ef276c53eb0.exe
Size

60KB
MD5

d9b7ff304ab48bcca2e67ef276c53eb0
SHA1

c523f2cee3b6aefd5265bb0e7b4e9b298ae2a73b
SHA256

a8ee7275a466240d92dce22d5175c70d69713483b84af08394b613e57e08b300
SHA512

5dec243509733a0532a68fc14c2f0856cc2c5fa0050126e3916fc4ca224899214684893fb04f5d9d45acd83db52d194704016f708dff16ee97b542ef17a42b4e
SSDEEP

384:sCSjdrFhCvM+373+sdTdmJ6MKH8U9MblOZJgbr+3KiXx4AaNM+g:sCmgvL73+kEJ63H8Uu+3KrNM+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d9b7ff304ab48bcca2e67ef276c53eb0.exe

Files

NEAS.d9b7ff304ab48bcca2e67ef276c53eb0.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ