NEAS[.]68f0a113a50a3340f106d6a2e6364f50[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.68f0a113a50a3340f106d6a2e6364f50.exe
Size

272KB
MD5

68f0a113a50a3340f106d6a2e6364f50
SHA1

a46dd6fbf0482076f9a585bb6a8e8660a5cb520d
SHA256

3f3c7e2fd3451558429d6ef3e08911a30310594f275173d238d811fd75521742
SHA512

caf880acc33fd9bc4d083788a7cfd5b647e599639451da485ee79b4215d32b3acc892a3f08f5e0bb8e4c82e716599816adf18d24da1c2646780bd591fc34a89a
SSDEEP

3072:rfbA7uidA7AyemWvik8STpUpbQ47+CcfIyZ+cjCtHKXUB5RXORmnSzUqQj:gdw3Wi2T2tPPEZzOHu6v+pzUhj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.68f0a113a50a3340f106d6a2e6364f50.exe

Files

NEAS.68f0a113a50a3340f106d6a2e6364f50.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 138KB - Virtual size: 138KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ