NEAS[.]b060a959974f760d5e40e7618d685560[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b060a959974f760d5e40e7618d685560.exe
Size

2.4MB
MD5

b060a959974f760d5e40e7618d685560
SHA1

efbc3022b6f058ffd9005bfe46d127837c40c46d
SHA256

636e2415b4109c37f81d437e3e091ee140d7764d3da0aaf15cad1f13fdb69dc9
SHA512

492402a00eb4582e91fdf19b2c1d04ae4afa851a9738e525727841b208c30df9d5fe9bb148e2aabd6add6570f8dae998b437193a309ed9cd66797ec82282b565
SSDEEP

49152:DtXSOdI/1OEid125pmTDluvi7zM9Bb3cdnUBi8zygHvrlG1n8JnB:pCOdI/A/dUmPUK7zmBrcdnQblPxG1nM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b060a959974f760d5e40e7618d685560.exe

Files

NEAS.b060a959974f760d5e40e7618d685560.exe
.exe windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 346KB - Virtual size: 346KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 177KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.enigma1
Size: 1.5MB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.enigma2
Size: 300KB - Virtual size: 300KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE