NEAS[.]dc1794aa1c3e839b75c096e28530ecf0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dc1794aa1c3e839b75c096e28530ecf0.exe
Size

64KB
MD5

dc1794aa1c3e839b75c096e28530ecf0
SHA1

40e6672cd47483f2a8fc7cd0b5823791f9dca69a
SHA256

6aed97c0f8af3dea66c7a3915e3a306e36ca1ee9d49fd0e2638eedc7e24afac5
SHA512

03eebbc73ae7751e121716fbad051da2a36f0b75ca503bca56778760ab1889f98fc05ad26c86828c4dab22291bae9a2392b96f71e918f6e329fda744b46d1732
SSDEEP

768:DHOs7Vi/G3LCDhcXIoNH9u/obeTwuS/mzchcGv5YEn6QpBoyx6KUC/AIV4VxXtol:DutuLSS1v5FgVCYXt4W2L/2+lWu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dc1794aa1c3e839b75c096e28530ecf0.exe

Files

NEAS.dc1794aa1c3e839b75c096e28530ecf0.exe
.exe windows:1 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 132KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kofbl
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l1
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ