NEAS[.]ddb67e5479702edb9b59d3f9976242d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ddb67e5479702edb9b59d3f9976242d0.exe
Size

504KB
MD5

ddb67e5479702edb9b59d3f9976242d0
SHA1

0a1ac0d9b1c50514fd9e1ba4e927ded6dbca1e9b
SHA256

db8ae5b77e7606fd5d48cfdb924ab444c45ab1923758c6ca777c0c2a83a2b527
SHA512

499101815cfdf4fb82a0c2b2d1744f5153592cbfed2786c90faec72a01901bd0d6e2f7da1153bac596298b8408b8dc6ae936543483102e6026fd8fe79e3ec5f9
SSDEEP

12288:woJb89UbxKdoxBjrGDYSSvnOLwrNvbxHC5ddlRKxpF5V5R:woJb8RoLK8SSvOL46RYFdR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ddb67e5479702edb9b59d3f9976242d0.exe

Files

NEAS.ddb67e5479702edb9b59d3f9976242d0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 472KB - Virtual size: 472KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ