NEAS[.]f8f1a672d7ad97a653b7044b6c125bf0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f8f1a672d7ad97a653b7044b6c125bf0.exe
Size

6KB
MD5

f8f1a672d7ad97a653b7044b6c125bf0
SHA1

4a7f9a761350ee81363f44cc989870789e148380
SHA256

2984f2e8ae897f118dd02b3607d46e81f0fc46025b97d96b804d109d7dff2328
SHA512

2d11213f804ddc367e5b6cd0011ac97053c3a68ea0a21534405cdeed30276d5f23df6c982594502ef6b3a126739a5ce436b1f1d53e9f2c87560ff159f83e331e
SSDEEP

96:nH+lj9YDhx/cHyTqc8AU7y0Lz881fkOBOpobmw9YkvK:nHQYb/Zu1ym881mFkM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f8f1a672d7ad97a653b7044b6c125bf0.exe

Files

NEAS.f8f1a672d7ad97a653b7044b6c125bf0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ