NEAS[.]189904fafea1b73b773eea29e57e8e90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.189904fafea1b73b773eea29e57e8e90.exe
Size

14KB
MD5

189904fafea1b73b773eea29e57e8e90
SHA1

5a49bd5811f81af3a92e6fe5a7a78c86f44856f1
SHA256

23e5836bf239edca07e2401db2955c919d180a1a453237ee2d49883aa5ba4395
SHA512

329ee38cc5b203938cf08c5f48792a2b8873a955f703f0592c72aa1646d8819ccc949a7bcc637f4d3474ee99916a245017295a774fd6a6bcba9de2767229adb2
SSDEEP

192:Qf1hz3rDIpeAyWF3qVd2UlCN1fiV8nQwpg/ubYPqhWICW:W1Z3rEpPF3VUlCN1fiuBu/YjhWICW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.189904fafea1b73b773eea29e57e8e90.exe

Files

NEAS.189904fafea1b73b773eea29e57e8e90.exe
.dll windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Exports

Exports

DllCanUnloadNow

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 528B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 842B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ