NEAS[.]6bca09719253c5cd5c1f2beee9be4e00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6bca09719253c5cd5c1f2beee9be4e00.exe
Size

64KB
MD5

6bca09719253c5cd5c1f2beee9be4e00
SHA1

a756b9e89d39930d5d96971ad88a044397e454ac
SHA256

2fb72bd838c42ebb2042f806f2680bc81560666d19c7ac5b2f6efc6bd492aeb6
SHA512

7a7f687f5f28b0fecad0f76e2f6c0758ba93c905c716cc14a577a3e3d4faf9e64401b18cfeec04e9567d8d5fb3a4062247230e73aec95a4c4a72e17b5cd714ca
SSDEEP

384:5vfftVCFnsPiPGPJPu71R154pN9T6vtJE6+eJnG+JFpTDtvdE2E/tInRjC0tHzaf:5H1Yds6eulUTw29UDt1OtInRmge

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6bca09719253c5cd5c1f2beee9be4e00.exe

Files

NEAS.6bca09719253c5cd5c1f2beee9be4e00.exe
.exe windows:4 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.neolit
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.SEFCMD
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.PTData
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ