NEAS[.]be8f643b99644e00b917594385a0cedb[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.be8f643b99644e00b917594385a0cedb.exe
Size

3.4MB
MD5

be8f643b99644e00b917594385a0cedb
SHA1

7c07e9151bdba727118082c7edd9a32fee458eb8
SHA256

f7f0d279ca12d0bca2da438502eebb3f069f4c163318b33e595928e6d3fbc8c5
SHA512

b9a504952d1b55cf9d6d04f60827858355a208426869f9865a8f06457fe7648358b8f71e285c38bbe21d67a57dad0a6c4779fc4c3282396cd6fddea77cb240b5
SSDEEP

98304:OyhqqYujp+KUfo34oISTFTIi4xbxJvclis:Tq3ujjUi4oIShLmbY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.be8f643b99644e00b917594385a0cedb.exe

Files

NEAS.be8f643b99644e00b917594385a0cedb.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ