NEAS[.]6f097e939a486c0cc65dcd6362dddc20[.]exe | Triage

Sharing

General

Target

NEAS.6f097e939a486c0cc65dcd6362dddc20.exe
Size

123KB
MD5

6f097e939a486c0cc65dcd6362dddc20
SHA1

a96987b95882cb5045b4830c6406685443e2b51e
SHA256

2929709e1e45f6d8659d606a1e50474e313c87b16da9d1f12431cea87a982f65
SHA512

5c3613367b25e34565808ba8c364f77cd9047b765e9a91e58f736277487bb518d30358033dc3c87b3b692f1a2c2b28348b57da7e2c20840c84bd10bbf33fbb1a
SSDEEP

1536:6k3c2rlUV0ysgkkkkDkkkF0GNQaWXzd0Ifz60ppdQQ4oIOQw:UcgkkkkDkkkF0Geas9dmLc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6f097e939a486c0cc65dcd6362dddc20.exe

Files

NEAS.6f097e939a486c0cc65dcd6362dddc20.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 118KB - Virtual size: 118KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 145B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ