NEAS[.]dd793d7286138a277be1ebb2e94e0610[.]exe | Triage

Sharing

General

Target

NEAS.dd793d7286138a277be1ebb2e94e0610.exe
Size

496KB
MD5

dd793d7286138a277be1ebb2e94e0610
SHA1

9c098073ab10491377551af257e059e80c8cd0ff
SHA256

cdce4dbcc4c252b955bb87aca83ec482e10749fd6252c1788a265104e98c62cc
SHA512

056d197ddd95de101cbb1d3c596d01640955bac80aa9d1b818106f57a59d9d42c7284b8ecae69b97e4634915eda26998757a65fb5aad88d3d0c78fbd83d9986c
SSDEEP

6144:TjFRiOcXH6XWD0w1tizmtnktLJ6znvxNcCI+1jDIlnJ9+1aTEPT1aK4JKEl:dRDc3yWDNU+YUznzNjElWaT0ZJQt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dd793d7286138a277be1ebb2e94e0610.exe

Files

NEAS.dd793d7286138a277be1ebb2e94e0610.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 402KB - Virtual size: 402KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ