6155ee344faec4d248a54f1b6698dac0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

6155ee344faec4d248a54f1b6698dac0_NEAS
Size

1.3MB
MD5

6155ee344faec4d248a54f1b6698dac0
SHA1

592a22e75bb6e0c7ae52eba7bf915fa102573365
SHA256

ceee5d0903a0b1e725a372ef11f72ec5bb0441e8fa17d3ac3f14c2f08ab620e2
SHA512

2989cc66a4a50fe95dd0df6e0a295ae9107c796f4f3f6700d15176437b0278b67b2c7cb99f858dd233757d4ee459ba730bd5fefa41ec194f1f4c7395e095180c
SSDEEP

3072:Qpbg1H/bHWVpUIWplbw6+uNV8d7Imv7P030WBbWHg+RLr+bybrAs:QVmHD2Wpi69Ug0UbIg+RPb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6155ee344faec4d248a54f1b6698dac0_NEAS

Files

6155ee344faec4d248a54f1b6698dac0_NEAS
.dll windows:4 windows x86 arch:x86

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Sections

.text
Size: 1012KB - Virtual size: 1011KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

ENGINE
Size: 52KB - Virtual size: 51KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 195KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 61KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ