NEAS[.]99c6c115b888e6614baac9fcc4a899b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.99c6c115b888e6614baac9fcc4a899b0.exe
Size

948KB
MD5

99c6c115b888e6614baac9fcc4a899b0
SHA1

5fe2f606b767e16030743216781415e827cc13ff
SHA256

09399265a99fbdafb656d1cf5eae1a090e6a480b8244de7d16f3969a96af36eb
SHA512

9e2230985f862333ccb2c2b45e4b9ee4e1cc4c75b4c8fe2cf803bbf18b4dc37312c2bd2464a583055a66063a1c18fc3d2ab58300762ed7cbd9b23aa48e438cbb
SSDEEP

24576:b54GSWcUO6ST2+tkn43Gr5v5MI5pqq5fW:bqdWZSjJ3Gr5v5MID5fW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.99c6c115b888e6614baac9fcc4a899b0.exe

Files

NEAS.99c6c115b888e6614baac9fcc4a899b0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 272KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 15KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 615KB - Virtual size: 3.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE