NEAS[.]690e76378a404013be532556bf865330[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.690e76378a404013be532556bf865330.exe
Size

464KB
MD5

690e76378a404013be532556bf865330
SHA1

8465717f8291b15f2fb4703ad991be47352a4e71
SHA256

fccd93ae75a2b06a5f52dabc0253bbb91a8b20a4326c0b5e448f080358ac8e92
SHA512

4c5093ee9a768f91fafe6f9507967e2dc19de8c5626ea50354e67274cc4e0ff05977e65c047df43229fc4374fb4b679a757b3257934785b1e8792dee214c987d
SSDEEP

12288:NNlc87eqqV5e+wBV6O+EaqXf4GPft8mBLMK:NNSqqHeVBxJaqP4GPfWmyK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.690e76378a404013be532556bf865330.exe

Files

NEAS.690e76378a404013be532556bf865330.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 464B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.l2
Size: 229KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ