NEAS[.]6b76e4460579cca6aa1e97862ff348c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6b76e4460579cca6aa1e97862ff348c0.exe
Size

706KB
MD5

6b76e4460579cca6aa1e97862ff348c0
SHA1

48a52c833c5654d4988ffb1965f5e1be30109d8b
SHA256

78a6bbd9dc9ff163b3054560b747d4c580150da95780b74726ecb7e3c41f842c
SHA512

09b59b6703ad1e798a032d6a5794e6a630d2c4815826b6913c912eec27243c64539361a0ca4bbf0ea8968254c04b4797b1b1b0084688fa23dc8c5c18403da0da
SSDEEP

12288:vThE17IUYh78pDnud+hhOZcA4Z+L+Nzjb4nKkH/unEIZUlxOnY7a+1:rqU8pugONz4zjbJkfdIKxQX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6b76e4460579cca6aa1e97862ff348c0.exe

Files

NEAS.6b76e4460579cca6aa1e97862ff348c0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 451KB - Virtual size: 451KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 10KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 16B

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 34KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 197KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ