NEAS[.]6dd0b0ad97eda39d244c9db1c71ab3d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6dd0b0ad97eda39d244c9db1c71ab3d0.exe
Size

264KB
MD5

6dd0b0ad97eda39d244c9db1c71ab3d0
SHA1

b972c28158951ba3f5444a44b0b3bcf5b8b8a83c
SHA256

94bebb0ce99f6852c785794c4f20f81262344ee91933e2be77c8ebb9b729f8ad
SHA512

310e041a05454177097fb7fb8ec600540a01a7496aa4ecf7436391387fcf6521f21d989f3406307b03d889721d2878c26699ee9089ea71bf28b39b8a3b351e6e
SSDEEP

3072:wlKJ0dWrj+VUWc6Iuo75Pv6Y+GoRuTsRUA3lEui3JRTK6U8:kKJGWrj++pPuoN36Y2RuoEPtK6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6dd0b0ad97eda39d244c9db1c71ab3d0.exe

Files

NEAS.6dd0b0ad97eda39d244c9db1c71ab3d0.exe
.dll windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ