NEAS[.]b6648fd8269df1930d832c0dc51757c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b6648fd8269df1930d832c0dc51757c0.exe
Size

147KB
MD5

b6648fd8269df1930d832c0dc51757c0
SHA1

96ee97babedbe43c848fbc5a9c12deedf0c05a24
SHA256

3ca170f975fb21df6a8833fb98af7361b4ff6cf3dd21ba4fe2da42a4d2099e5f
SHA512

dc0edad11c6850a28d14141e0756517007400f502e335294bb3353b8eb2a364212aeaecac1b7ea44dfb4a26a49f40d4262121e9bd736902b9ffcd943ca6f1970
SSDEEP

3072:0K/zBgaB0EGkGUK42Obmi7k9T6lx8putNL5G:0kBgaB09d7Obmi78utNs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b6648fd8269df1930d832c0dc51757c0.exe

Files

NEAS.b6648fd8269df1930d832c0dc51757c0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ