NEAS[.]f1f5765d8c67743ca543eb5ef486d620[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f1f5765d8c67743ca543eb5ef486d620.exe
Size

211KB
MD5

f1f5765d8c67743ca543eb5ef486d620
SHA1

c072fe6bc38316f7408d193b303ee7ec2d325fdc
SHA256

366da7b350eb961e676c21797ed2e8913b692e2c08fd2f235011a685b5e618d8
SHA512

e8bf0c9e696c73a90bb324d9e2c18eaeed429ff6ffa586d9ff2cb1e474f03ea7e13a5edcaafb4bb8c97021e04d17df6496c0c9c9b803e4df34623197eadf39df
SSDEEP

384:uLkvwKwq6ua/NgmKHKm8djQWE4ZlyrgJg5QnlnS0D5Ma0g/NgmKHom8djQWE4Zl:uVU8k4ZBpxd5Wgs8k4Z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f1f5765d8c67743ca543eb5ef486d620.exe

Files

NEAS.f1f5765d8c67743ca543eb5ef486d620.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 102KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ