NEAS[.]dc6ee32ce5bdecb20983a69ca6a47460[.]exe | Triage

Sharing

General

Target

NEAS.dc6ee32ce5bdecb20983a69ca6a47460.exe
Size

321KB
MD5

dc6ee32ce5bdecb20983a69ca6a47460
SHA1

c4e5cf1974fabd6e17f3955934a63e9298413fd4
SHA256

261efe2be58336933fbc6b9bcac26633252c997b76764ce36088159c820d8618
SHA512

6bec9165d93028a58d61fb7b7c0bbd7856f2d8e22621cfb1ee9da4d7d7b1047224f71c8f1176ae9c373a502eab18b60aa3c3062064815574fbce5f0b6900587a
SSDEEP

6144:8emrIvl4EC+iU3/SzqyVCUiZMhFJj3lzfi/I:8lIN47+l3oqyVaZe/Lly

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dc6ee32ce5bdecb20983a69ca6a47460.exe

Files

NEAS.dc6ee32ce5bdecb20983a69ca6a47460.exe
.dll windows:4 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.text
Size: 297KB - Virtual size: 296KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ