NEAS[.]e96360df949d9629d363f0c731653460[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e96360df949d9629d363f0c731653460.exe
Size

75KB
MD5

e96360df949d9629d363f0c731653460
SHA1

c599e9ad88918b6e9c7f79217e4dd6b3a2dd5541
SHA256

cb04c95e6582d0ef904ecce02ead247792897f1c99d2c03aa71df7008cf3ff0b
SHA512

0e1e15ffb302b62d0b9ae500ede0bcb6b93025cfa619e53979b55397be513a139a6cc3439ec9ad9cf790692715863f4633990a3e360380d9a63d82d6e43b8f07
SSDEEP

768:ES2chfIFL3ncIKf2AQYGGtodDq40GTgWEzm8u6dBoZVMJy:RNhfEcMYGbtvAC2dB0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e96360df949d9629d363f0c731653460.exe

Files

NEAS.e96360df949d9629d363f0c731653460.exe
.dll regsvr32 windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

CODE
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 512B - Virtual size: 108B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 129B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 174B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ