NEAS[.]dd1a81d9138981410130f236b6bf7840[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dd1a81d9138981410130f236b6bf7840.exe
Size

246KB
MD5

dd1a81d9138981410130f236b6bf7840
SHA1

6f6ec90d5c9e7b2e0e12d2e45b39c0fc8ff1762a
SHA256

a2430d584d2ee603cc808b8f0ba6542081bf5b1e6dc4bfe147a89aad457c4f3c
SHA512

6d725fa3f961b4650fb0962bd21516cfbad6f7c197e4f2276f96cd9edf2e1d1b21f7722ad4c949330fafccfcc48eb5ac5f60578fad841eb67b940018835f701c
SSDEEP

1536:bYdAwJSwzeoeZlppkmiv1DMibqNZBNOhJIN3Oi:bYi2ez1pU0OXe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dd1a81d9138981410130f236b6bf7840.exe

Files

NEAS.dd1a81d9138981410130f236b6bf7840.exe
.exe windows:5 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 182KB - Virtual size: 181KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ