NEAS[.]06a774322bde56f19e9b32d049cf8020[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.06a774322bde56f19e9b32d049cf8020.exe
Size

72KB
MD5

06a774322bde56f19e9b32d049cf8020
SHA1

6097878230e9798c93cbad21737b78563349b73f
SHA256

349d7157a9c4ea0c8d6c3d563e01ab88f67b2a488cbd6f524529f8c9f66f2687
SHA512

1d1c5a99e0d53bd5f7faa6495c4ce2294bbf3ec8dfda62529439fb3e9081f189c7e4ee5572b277fd69b990e7f6db73d14e02a1d412f64a40a2070d1ea4b3b7d0
SSDEEP

768:CVEC/BWCkFLYRb9xCoZtWmNII59UWCTUJpG95:CuCZnx94Ji5eTU+5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.06a774322bde56f19e9b32d049cf8020.exe

Files

NEAS.06a774322bde56f19e9b32d049cf8020.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_NET_RUN_FROM_SWAP

Sections

.text
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

reloc
Size: 4KB - Virtual size: 854B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ