NEAS[.]3e071a5ca23d9451b89b58d41c74d7e0[.]exe | Triage

Sharing

General

Target

NEAS.3e071a5ca23d9451b89b58d41c74d7e0.exe
Size

182KB
MD5

3e071a5ca23d9451b89b58d41c74d7e0
SHA1

d7703935ed882444021308f0fda805fde2bdd46c
SHA256

7375429bddc18e9355337e9210c0c62c2fc9b0bd4d1bd322a9c609eb09e5ebb9
SHA512

a64f118f0b5b3a2f79d2286bd697b0afa5264a1df070f81f78a01dc008d65a7f7b5f1b17b893463e7e388907a695afbeaa70e9858cde5989daed2691c47cc857
SSDEEP

3072:zTpdtk7c84RPtLYG9wne8u63wQ5vw6UFUIoL4K0w8:zTpnk7cRPtEGKwQ5vw6UeIoL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3e071a5ca23d9451b89b58d41c74d7e0.exe

Files

NEAS.3e071a5ca23d9451b89b58d41c74d7e0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 179KB - Virtual size: 179KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ