NEAS[.]64067ebd1a408e6521be9e880bad3380[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.64067ebd1a408e6521be9e880bad3380.exe
Size

74KB
MD5

64067ebd1a408e6521be9e880bad3380
SHA1

5bf1e186a3be670c1785166356f60c01b5096d47
SHA256

1d2e82854442bd93722c9753c0008d352f827b29081cebb999b85c874a8b3103
SHA512

2b0da1da20a53ceb1c4a8a29f4dc4283ae7d5457272897a20fd39fc1d2eb0296ec9656cab3acc7c7ccd0fb96c2605b78ad2f1d295e1a4f6f74ee89cd6e7b1904
SSDEEP

1536:lDjs8/K/3kiESnGvZXhr1IVHm69FiSCqTi+s8G4:tK/3kW0TJCHmgzJm9A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.64067ebd1a408e6521be9e880bad3380.exe

Files

NEAS.64067ebd1a408e6521be9e880bad3380.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

CancelDll
LoadDll

Sections

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

htomaota
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ