NEAS[.]e71a67e34391e607ac5b0d6be456a5b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e71a67e34391e607ac5b0d6be456a5b0.exe
Size

52KB
MD5

e71a67e34391e607ac5b0d6be456a5b0
SHA1

4f9f678e74f0e2c5d8d3293c20ae4f8a00af51f0
SHA256

a87a7c1568eb11481dbb54bc64037eb958d4b5cad5982eaef8afa5cbcbf72a2a
SHA512

16b6b6a96853c2cde53b0ebc4bbd8365985c11a3eb18fc8e3a6ebb2e686b1e73f4d5bd05e52ac5ae7779b386f64ea69d9ba8437f402d71f65d6781166f242bab
SSDEEP

768:0fDa1OW0OpARTnU3GeEAZbwlnhF9nSNZ:0ba1EOpARTn4fonhF9CZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e71a67e34391e607ac5b0d6be456a5b0.exe

Files

NEAS.e71a67e34391e607ac5b0d6be456a5b0.exe
.dll windows:4 windows x86

6207997c9118f903b30a31e6f343a568

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

carclw60

CARC__EnterInstance
CARC__ExitInstance
GOL$C2
GOL$D2
GOL$S2
GOL$A2
GOL$25
GOL$52
GOL$M2
CARC__StopRun
GOL$A8
GOL$85
GOL$55
GOL$VN_ASCII_SIGN_TABLE
GOL$58
GOL$D5
GOL$M5
GOL$S8
GOL$C8
_CARC__LibraryMain@12

Sections

.text
Size: 47KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

RCLID_TE
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

RCLEP_DA
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 1004B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ