NEAS[.]163d41906517afe240eff174cc4bb120[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.163d41906517afe240eff174cc4bb120.exe
Size

15KB
MD5

163d41906517afe240eff174cc4bb120
SHA1

4cb83fb5fbc61e93e0b9389b5045d6e468f29eb9
SHA256

5dea05f82b6b0310db5c379457e43ff818b4c50aee0b086bb5649328b934d31e
SHA512

0a871eedc4ef6551c78cf1d13517eb1ab700d7b84922ea569b02c55d86b20f9753636f3a6ea694a7a65bd7afe727e13d452b995dea17be3b7e85ab87b42bfd37
SSDEEP

192:EwEoSWV6oVPfC3b0vXdNN8sDhZSvebOCPPfx8bE3PuLqcBqDE045HQNT:VEotVBdDDhcC58bE2ucIDE045HQT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.163d41906517afe240eff174cc4bb120.exe

Files

NEAS.163d41906517afe240eff174cc4bb120.exe
.exe windows:4 windows x86

2636a9ecfb87e14481c9b58327a1359e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

msvbvm60

ord65535
VBVM60.DLL
Qs2"Psd�Qs�Ps�Ps�DDs�cDs��Ps"Ps&�Ps��Psx�Cs�iQs

Sections

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ