NEAS[.]85194041b4f5ea737a80e763bf599480[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.85194041b4f5ea737a80e763bf599480.exe
Size

208KB
MD5

85194041b4f5ea737a80e763bf599480
SHA1

e3976e351d0661d333a90b7ad058d0248b5e9f76
SHA256

f8b95783a9d13a8c358b8ba28957b27403a0a478434175cfb777cb71099ba4bb
SHA512

33b42f73d5408c9396f7f89178d9c7c6d035601cfd422514cc4df49b7e78fcb6d44a889ab9ca3243d2ab14c2a6accccd4da92fa3a21b9313e2f80047cf6fabea
SSDEEP

3072:pinmS19zXgdcIS7fQWekYK/WRiK1kKMzsuVkO4gyGcTGFyzpg9FfPfFX/zRljOVH:S4MzsuVkOwrzpg9FflXbREZ+iL3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.85194041b4f5ea737a80e763bf599480.exe

Files

NEAS.85194041b4f5ea737a80e763bf599480.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ