NEAS[.]740000c0b1875d75223e8b76fa7ff510[.]exe | Triage

Sharing

General

Target

NEAS.740000c0b1875d75223e8b76fa7ff510.exe
Size

10KB
MD5

740000c0b1875d75223e8b76fa7ff510
SHA1

ac4d2f72559318fe05e0b543d44b9f5f79902cc7
SHA256

bf19515a1771b3187288522780555477285cfbdca0d3522646bb050725b0cd06
SHA512

96cb1b2af30ff2c895281cb42cc7e4d0f0681ff5c9bde16bd74f71300a3445f55e8342b26bd0c185ba020201aadfe2a72a5b5026ee0dd08509d540a104777f10
SSDEEP

192:cUUOGhX3aiHZpHfFVWOWYyYffqzQhYdY6h+eQL:oPHHf9VNW9ZQL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.740000c0b1875d75223e8b76fa7ff510.exe

Files

NEAS.740000c0b1875d75223e8b76fa7ff510.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

rPr/ YV
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ