NEAS[.]dc68253eb02b81756c0a38dda14f59e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dc68253eb02b81756c0a38dda14f59e0.exe
Size

80KB
MD5

dc68253eb02b81756c0a38dda14f59e0
SHA1

b89022537ed41d1d3a7ac4afb9535d1e845f4aec
SHA256

48bf4c59a23170243a9e103629bd801767f33650d9c8fd67838116fa83854051
SHA512

c9b21c45ff4fb91e9871fb9107576ecfb044f591a04c5694853a17afaaa7c8ec5f1ce981a9fd14a4aa71004186f1823b4016d2aee092b6d46413950c67ab5bad
SSDEEP

1536:7mpLeICAsvW2++ijLR9pERojCJa7MOt+BM45:MLldsvWL+6V9pgojCJa7MOIr5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dc68253eb02b81756c0a38dda14f59e0.exe

Files

NEAS.dc68253eb02b81756c0a38dda14f59e0.exe
.exe windows:4 windows x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Sections

.text
Size: 38KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.aspack
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.adata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE