NEAS[.]c68618772aa2eafcf602050abf687250[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c68618772aa2eafcf602050abf687250.exe
Size

268KB
MD5

c68618772aa2eafcf602050abf687250
SHA1

cedc88481b06c7632ef092845a57b717918d74aa
SHA256

90bbcd70467cbcb07965f16a7dcfb9010b5663f2006c57c145289788653fe54c
SHA512

1e6d8a82e1c0d3e68c4853ce17de47c500741c21a49cddc37e15fb0d88c2d427ee1787d4eb16e923c744a5dfc0fb1f93369ff6d6a5be3f061dd4c663bbdf933e
SSDEEP

6144:fHlB02AQvxx+9ONN3ENhrLR7p52bPbqQS/:fHwRQvxxWONSDXNo32

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c68618772aa2eafcf602050abf687250.exe

Files

NEAS.c68618772aa2eafcf602050abf687250.exe
.dll windows:6 windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 1024B - Virtual size: 904B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ