NEAS[.]c6a657e09852c4cd7ea2b8d0816cd680[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c6a657e09852c4cd7ea2b8d0816cd680.exe
Size

365KB
MD5

c6a657e09852c4cd7ea2b8d0816cd680
SHA1

99ff570e91d8652e159dffdc2a0e44274bfbddfb
SHA256

9a69aea58af9c73f1e2372b228e7b6e8d096d68e75cfaf49a53bbc638e1370a2
SHA512

df580d194dee44788294097acf944525cdfebcd519389d235f526bdc3bf0902b38ffe315b19feadb11eb91b541e90e1d74e6a188f8fc8a0bb88d079a712d3285
SSDEEP

6144:fWxlKgzelZNQSBQGH/CSpWqTzKJcfh2m71Z:fdfBQGH6Sfnp71Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c6a657e09852c4cd7ea2b8d0816cd680.exe

Files

NEAS.c6a657e09852c4cd7ea2b8d0816cd680.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.MPRESS1
Size: 236KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 79KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.imports
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE