NEAS[.]688c8c43187844e2dbe0565dbf8f3660[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.688c8c43187844e2dbe0565dbf8f3660.exe
Size

163KB
MD5

688c8c43187844e2dbe0565dbf8f3660
SHA1

d9112f5a9d9ff0422d05a8f4fb7d62be819c7a02
SHA256

893a948221a0e34f787f3460722510c79f2069cfeeec97c6ed861214c7ed7253
SHA512

1227308750a101380a2bd7111dbc3035d8198ebdeeaf077d5c1a2e795a74979770926b7ebdc8af962b780cde6beda97880a59071035aaa8abb0c73eeb128154d
SSDEEP

3072:Qb1TRS2POx2p/hoRew8Xi9EiJ391mxPZPhe9M2ul+ALYodhDxTBf3UHDS:w1TzG2UQ5IuRhDxTB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.688c8c43187844e2dbe0565dbf8f3660.exe

Files

NEAS.688c8c43187844e2dbe0565dbf8f3660.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

recanalyst_analyze
recanalyst_analyzetime
recanalyst_create
recanalyst_enumingamechat
recanalyst_enumplayers
recanalyst_enumpregamechat
recanalyst_enumresearches
recanalyst_enumtributes
recanalyst_errmsg
recanalyst_free
recanalyst_generatemap
recanalyst_getgamesettings
recanalyst_getobjectives
recanalyst_libversion
recanalyst_timetostring

Sections

CODE
Size: 129KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 2KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 548B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ