NEAS[.]b69f768533b5dafc30d56ca617d29be0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b69f768533b5dafc30d56ca617d29be0.exe
Size

2.3MB
MD5

b69f768533b5dafc30d56ca617d29be0
SHA1

d88fff9880c4d8f0d1f16078fd9d4ab20095bf2d
SHA256

2ba71da2cdc35b3866995a113ac929d817320d86c2ea106b747b5784f8996576
SHA512

a74fe972f01cdede29adc8c5576e671353f3de553c8847b655714a8a55fc626a1feae0b33e14345c3fc76fe0027280585d24f93012c1c8feb497121cb2fc3b52
SSDEEP

49152:FQSjyQ908kP0SRLdz2kKQuC3KByIXPYtwmjwMrAjXnc:2QyQ9JkMSrvuC3KBtPIDwuwnc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b69f768533b5dafc30d56ca617d29be0.exe

Files

NEAS.b69f768533b5dafc30d56ca617d29be0.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 8B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ