NEAS[.]f5cdd952dde64227529c2e3d07637100[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f5cdd952dde64227529c2e3d07637100.exe
Size

301KB
MD5

f5cdd952dde64227529c2e3d07637100
SHA1

b869fef7a3a25bee09f598e3fbb41009733ac588
SHA256

6f230ad0cebf71883018dc7329cad5804c2791e77af3d100ce4e71d1a9d4d608
SHA512

898efcd0bcbe147ae00421a438a412d02bd21f7d9bfaa5e71ab00c70d0e9b8ebbe99d607d7d3a3d83ae37329aad14d5946f96e95953793186e21fc249f44fba6
SSDEEP

6144:C81wkAbxlupUAhUQR2lb1rWgc2wRYijmnZpAv:C82DupUZcgwRYijPv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f5cdd952dde64227529c2e3d07637100.exe

Files

NEAS.f5cdd952dde64227529c2e3d07637100.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 287KB - Virtual size: 286KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ