NEAS[.]bb7e779f35b5c97131dfdff99a7fb7f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bb7e779f35b5c97131dfdff99a7fb7f0.exe
Size

111KB
MD5

bb7e779f35b5c97131dfdff99a7fb7f0
SHA1

0de5a09524f4b1d804350ea7b9496e2c2b633d5a
SHA256

03125e43c5d3435c8c401c7211976d7d9543490b53534045a69d13a295b42777
SHA512

8c1d1faa495bd7449830f99bb20dd43089990a998d3f49fa4ec649866d85adf516f26f3e1bb70cc50f9b63a2a347f1b3bef966afe19727fe5c8cabc35a40b76f
SSDEEP

3072:rQUvy52+VhwC5SIFBaM8HdjlrygmTQ65W/AaBvmp:By5xwuSInajnwb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bb7e779f35b5c97131dfdff99a7fb7f0.exe

Files

NEAS.bb7e779f35b5c97131dfdff99a7fb7f0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ