NEAS[.]621af16833d7afdc1260e8ec64952470[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.621af16833d7afdc1260e8ec64952470.exe
Size

22KB
MD5

621af16833d7afdc1260e8ec64952470
SHA1

1a691a7b8156565510613767e6d17dbd3be8992c
SHA256

9f46af57414c7d8b7203c6480cf43b04d901714807db22e83b26393f37a9e935
SHA512

ebf8c3726734f03825f9b551cd74338b750eb2eb57a6b302446e140c4e91eb748ac5a5ef4de9c9a6ff2e841cc9ddd4e50668861072cf28b872280096868483bb
SSDEEP

192:Mr/kZ9tTr8aiLJLyGugi46jc1ZhbccYlcMdXBwO:AshBiL5ygi4CobElxdx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.621af16833d7afdc1260e8ec64952470.exe

Files

NEAS.621af16833d7afdc1260e8ec64952470.exe
.dll windows:5 windows x64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Sections

.data
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xdata
Size: 1024B - Virtual size: 520B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 14KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ