NEAS[.]a3944d34138dd37cd7aa165e9f12bea0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a3944d34138dd37cd7aa165e9f12bea0.exe
Size

400KB
MD5

a3944d34138dd37cd7aa165e9f12bea0
SHA1

fa7d9dde357e81ff73897d58c1a6cb364e081afe
SHA256

ff6c7f1bfc806d62fb0af5c6449bd5026f2714d1a68a7e71d0bd642354b222da
SHA512

f3aca977950d2e707eaa34899da007c225fafba0fb0b810fdcd96ee97fe4ced7dad6913a1358ba48a52fdbdc08eecf1516965ae01d348d2b409a871438626ffb
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5wQTbHRQlt:/pW2IoioS6k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a3944d34138dd37cd7aa165e9f12bea0.exe

Files

NEAS.a3944d34138dd37cd7aa165e9f12bea0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ