NEAS[.]0ff1060fe4334372cbf828d37f5677b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0ff1060fe4334372cbf828d37f5677b0.exe
Size

55KB
MD5

0ff1060fe4334372cbf828d37f5677b0
SHA1

80fe41197df5fef283f0069147a3ec13d3fb4ac2
SHA256

100d2fa526741b7775966d70896fa2a73f1d3e1e36adb3cb08900d66616db9d3
SHA512

75ff1776c5773852bb871ddd39d64a16a381ff82eaea377614aa9b5f3bb6af8ba241106f10e25f16e79c02d4f1267fb8c1d30c49d4c6040ebd582504f21d4e4d
SSDEEP

768:AGg6iUAvJ8l5kSTCVJyq4M+bpzPGxvv/uw1111Xcubm:AEV75kSTcJyF3Piv/uAb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0ff1060fe4334372cbf828d37f5677b0.exe

Files

NEAS.0ff1060fe4334372cbf828d37f5677b0.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.5430
Size: - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.5431
Size: - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 10KB - Virtual size: 551KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

45krcn
Size: 383KB - Virtual size: 384KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

45krcn
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

45krcn
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ