NEAS[.]ff41d6424f11505c3840012b55703380[.]exe | Triage

Sharing

General

Target

NEAS.ff41d6424f11505c3840012b55703380.exe
Size

1.9MB
MD5

ff41d6424f11505c3840012b55703380
SHA1

f5801ee28958cd1ae05abbe961b5ea950886a80d
SHA256

08cf55cd2ea9fd3c7e836e60023a71d076f8419ac4591220f73733eb62272e87
SHA512

0d64ff14317aedd4110b54497f1d695b2121f6c80de3a7d666984955f2b145c4ce5641a64b931ef1076eaec6374ff7593f3e3be8fa9ae6906c9c110df87ce445
SSDEEP

49152:7VtENNb/R88A7VH5rukQdIFFBOEVjOT6ktQ6ruZHu:7VtG5Oru3dIFbjY6kK6rSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ff41d6424f11505c3840012b55703380.exe

Files

NEAS.ff41d6424f11505c3840012b55703380.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ