NEAS[.]c9e2a99eb94d4f4305779a9114420f60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c9e2a99eb94d4f4305779a9114420f60.exe
Size

2.0MB
MD5

c9e2a99eb94d4f4305779a9114420f60
SHA1

f4ba093fd7ddb089e7b7fa7d7ea412d1caff5cdc
SHA256

3bc5736678ab535d2fa862910fdd681af6d69c38d09fcc93e26186974e1ed623
SHA512

12e073638342943b8c78b21ac5052c0a31c1591066e1453934955e7ed76966e67d112d5a7aa66352b6612895434243a10cd238d0017e395b35bc5595fb2d6188
SSDEEP

49152:YjuIG3XJLrduEyztsR7OQzQzAmjqamm173:YKIYdd/yzt67OU7ap

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c9e2a99eb94d4f4305779a9114420f60.exe

Files

NEAS.c9e2a99eb94d4f4305779a9114420f60.exe
.exe windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 315KB - Virtual size: 315KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data2
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ