NEAS[.]ceb4b138c35b5e1586be5ddc57ac6730[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ceb4b138c35b5e1586be5ddc57ac6730.exe
Size

568KB
MD5

ceb4b138c35b5e1586be5ddc57ac6730
SHA1

1c605d4ba8e6631c1d25a717215cf87011115822
SHA256

1c37aa5d34746a75068e614cbca676b77d86373ad8b0323bad94c224dadc6511
SHA512

6c25363d0ac4432e824a15b60fb9245cac200711c4f362b86d2046244d4e2157ae2320def05af362b030bd4ea039ec3cf871e9599044c090a43ed08809ff7af1
SSDEEP

12288:I1bDMSK2VrhTZ9+Qo8wWfwYe1RpBFxNzd+rTp0DzwQ5:I1bQIhTZ9+Qwue15hzd+rTPQ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ceb4b138c35b5e1586be5ddc57ac6730.exe

Files

NEAS.ceb4b138c35b5e1586be5ddc57ac6730.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ