NEAS[.]6ee9b3f07618e472fea6cf29c4ea6770[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6ee9b3f07618e472fea6cf29c4ea6770.exe
Size

264KB
MD5

6ee9b3f07618e472fea6cf29c4ea6770
SHA1

b58f78f4d833f120c6300e5a386b7c72ea46eb0e
SHA256

1502dfbcad7c7827039757a8de1e3cbb4095c258851d9bba9c7e27e04b234aa4
SHA512

2ad71d904435a4912a0541cff562104b34d2ecf5e01cf0dea6a56013a0ee5ad087229908f129a069b5e1b99e0ba36c31443d52c060536a1220b2d7da071ec9e9
SSDEEP

6144:OauhGW7aONPVIQaQoYbGgUxMe34k4B3krrPK6:DUG8aOZaQ9axRRPn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6ee9b3f07618e472fea6cf29c4ea6770.exe

Files

NEAS.6ee9b3f07618e472fea6cf29c4ea6770.exe
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Sections

CODE
Size: 212KB - Virtual size: 211KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ