NEAS[.]1fcc76689d42072f80bf1442f9d06a60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1fcc76689d42072f80bf1442f9d06a60.exe
Size

32KB
MD5

1fcc76689d42072f80bf1442f9d06a60
SHA1

fff3686a8e7d770748ad326d3b6dbd26ff18f4ac
SHA256

045e85fe8000a659c4711a5f2a086e78cc9d4ec69e54705be0c9755239722532
SHA512

509871a56a1ebdf2a5eadab595c29ad203f0d801932a876be197058edbc7cfed50aac02e271e45a25a29a5d025e43f5071e918778234040134458e828114e93a
SSDEEP

384:EStB/RMrZ3ZdLKP5gF3i8Ny5QgDDfGaP2M0zNY4iEy:3BpQ3HC503i8NyqJaPT0zNYAy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1fcc76689d42072f80bf1442f9d06a60.exe

Files

NEAS.1fcc76689d42072f80bf1442f9d06a60.exe
.dll windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 866B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 128KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 196B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ