NEAS[.]d7749d37aa8fd0246cc4f5024abef1c0[.]exe | Triage

Sharing

General

Target

NEAS.d7749d37aa8fd0246cc4f5024abef1c0.exe
Size

161KB
MD5

d7749d37aa8fd0246cc4f5024abef1c0
SHA1

b1becffd2f882a6a4f067b1e7ef6bd36c09c8e5c
SHA256

a4223d6a76b346dbc5fe05a5cb55cf48475a7b500e2f0c94e8dff4f967f8d7ee
SHA512

5cd8a1d8f55f4a44b333ae2ab20926d6f36c58cec49dda5a9cc335c284bb5f403fd64530129be866e42f7b919c3ad7be89afe74995e9d12f5754ea7806c66d7f
SSDEEP

3072:xevKJmvHL6DjDndwNTChrxGRE2aVcPDOfFh+UZJbXSZIOfmndPGEMj3RLCY:SCndoskRE2eqC1SeOfmdk3j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d7749d37aa8fd0246cc4f5024abef1c0.exe

Files

NEAS.d7749d37aa8fd0246cc4f5024abef1c0.exe
.dll windows:6 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ