NEAS[.]5ef7ad03838f8b55892b74e63b27d700[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5ef7ad03838f8b55892b74e63b27d700.exe
Size

6.6MB
MD5

5ef7ad03838f8b55892b74e63b27d700
SHA1

2352f0ff1ecc605fcd5cfa1b0fe35adc35fbd23f
SHA256

ce29536015d42491ffcc3e8eda61f9188b4222bbc729fee9de5db8e0e080e823
SHA512

2ad7bfcb9512dc59a9b02f377fac2a4ff6e7a47b60385185ebd2f6caff46052288f4b535e149b7fdd4f6f2f180dc1ceb6c2c4cd5e46e3d058a523154800da88f
SSDEEP

98304:4Mvhd1pyMA5K2xwXzSBQE5OSiNfHXn/CNLT12/sSArbhWi3EJXOQYiwOBpIeW2UG:15cMA5K2xYzSBqfwcmrbT3EV6i1zwa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5ef7ad03838f8b55892b74e63b27d700.exe

Files

NEAS.5ef7ad03838f8b55892b74e63b27d700.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ