NEAS[.]fffbce30c4935883e966049ef4a1aff0[.]exe | Triage

Sharing

General

Target

NEAS.fffbce30c4935883e966049ef4a1aff0.exe
Size

431KB
MD5

fffbce30c4935883e966049ef4a1aff0
SHA1

2352efd3c4b3e20e7dcb7356348835ea0075abd4
SHA256

a703f8074374b18b50db943bf2c5a9dfa9f48d614c5520195c272e4fcfeeddfe
SHA512

7dacaae4b2f1c9cf4ab2331b2f5a278ae13b3fa02cfb55a98ca657d9e0769a7533d7c641ff493094f302bc87a2200a768f831105dd5ee814d417db76d65bdc34
SSDEEP

12288:E/UJDXotLKliAl1FxcSC/UJo5tcEiS7yrfZqvz1j4:coopuiCArP7y7ZAp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fffbce30c4935883e966049ef4a1aff0.exe

Files

NEAS.fffbce30c4935883e966049ef4a1aff0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 426KB - Virtual size: 425KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 191B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ