NEAS[.]781a09a045ed5bb82686ce12ec6c1350[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.781a09a045ed5bb82686ce12ec6c1350.exe
Size

34KB
MD5

781a09a045ed5bb82686ce12ec6c1350
SHA1

420a3092a8ea79c940b5cf44f378df497582847f
SHA256

68edd8ef35020c94c66123e6f00955983406c9996d0d2a35408da1f68950d132
SHA512

9427dc9521ddec05610d359f118c7d87d43f86930582ed0d316a6e4e057bff29612aa491e071d3c050b93bb592afdcf7bb74592fc6011e2468bb8028ffe9030d
SSDEEP

384:CswVIkx0fmjBjKbtm6dzdf+ALk24jXPlCBa3XECf1q0QdiB:CHaEvjitmsp+E2XPsu0iB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.781a09a045ed5bb82686ce12ec6c1350.exe

Files

NEAS.781a09a045ed5bb82686ce12ec6c1350.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ