NEAS[.]64bde84c24968f3f918c17d108059fb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.64bde84c24968f3f918c17d108059fb0.exe
Size

153KB
MD5

64bde84c24968f3f918c17d108059fb0
SHA1

eca02e0be04f31b4701ac40864305e69ba3c1e19
SHA256

c6fd4e20469d4c446aa39be2e0b71c75d0b763f7603afd457b5fddeb3f5770d9
SHA512

659e3548fa8bac258a045ddaf017500b8210d82f3e95c56134c25d345e48832bc883f119b06d016480d5a307dd0b9f8be91a87d102eb59ae6ae02c85972a668c
SSDEEP

3072:0t5GNW/mKHBRe4CYDXqKUICivXctgR4IOnvs1FFxqs8z6+Q:0bcWOKWu/E/iyIOnvszFTT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.64bde84c24968f3f918c17d108059fb0.exe

Files

NEAS.64bde84c24968f3f918c17d108059fb0.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 130KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ghop
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aw
Size: 55B - Virtual size: 55B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

fbn
Size: 1024B - Virtual size: 610B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE