NEAS[.]921827491a809bcb689d3eefaaf562b0[.]exe | Triage

Sharing

General

Target

NEAS.921827491a809bcb689d3eefaaf562b0.exe
Size

1.2MB
MD5

921827491a809bcb689d3eefaaf562b0
SHA1

a1d155b807be653816019d483504be8192c932b2
SHA256

9810f28f3e2a4bab3c24fb39d6a3b14b4c89034600538183b61e397b728bade4
SHA512

ba5defeb5e864a7682b1703463ce91120b75aa44af55f5ee8f9cb6a3ff2a1d164527611c2f410954be44d192d7f9dda599bb62b6fe3484d52113ddbbc540ab52
SSDEEP

24576:DiQCpT5H7TbpxBfaUT9ZHIpChwJoWUer46wuAa+dU7Uh1a5:DilbH4yRh5ErXAa+dU7UhY5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.921827491a809bcb689d3eefaaf562b0.exe

Files

NEAS.921827491a809bcb689d3eefaaf562b0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ