NEAS[.]a11cba4dd83dfac429c9dccd8ff75750[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a11cba4dd83dfac429c9dccd8ff75750.exe
Size

874KB
MD5

a11cba4dd83dfac429c9dccd8ff75750
SHA1

5afaadcb0d4839fe702a197f7c85e7a05a8a26bc
SHA256

ad1c54cc808b9e48823095e49b22d3738b23f33e76310714b3e6dc52063e30f2
SHA512

59e68a2fa034b2f985a2668edfca6e2b9cbb203fea12139c81aa92a42d446249c95065189bb843df868a332b2a8b5a810c0d540e308c7aef6c86132e0987e8e6
SSDEEP

24576:Q+n8XoTAmOPyYs5XY0CvVA4t6JeNDRzVGM89:Q+n84DO4Y0CvOg6JextcM8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a11cba4dd83dfac429c9dccd8ff75750.exe

Files

NEAS.a11cba4dd83dfac429c9dccd8ff75750.exe
.dll windows:1 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
IMAGE_FILE_BYTES_REVERSED_HI

Exports

Exports

QuickLicenseRT
QuickLicenseRTX
QuickLicenseRTY

Sections

CODE
Size: 756KB - Virtual size: 755KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

DATA
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 141B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ