NEAS[.]c5d4458a1b0ba81cd641a45477287740[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c5d4458a1b0ba81cd641a45477287740.exe
Size

745KB
MD5

c5d4458a1b0ba81cd641a45477287740
SHA1

d3f8fd53e16df07c5352e15e57bb172a729db828
SHA256

0e962a3dc9189b5dd12e0baa0c031cab89a8b59611aba673f26c9b243892087d
SHA512

3cdb0d0ced89e19d32919c6c08c12e18b69d2e0ba224c9512d4c0ac28af4e8e272b5c33c7576b7a838d542d4e36c9e67af420d675abf5e03ef730a6b70f58feb
SSDEEP

3072:l1pyQ/cvPobZPzaE/67lFV4cBmWfOobZPzaE/z7lFV4cBmi:DpyQYPaZPzaE/67CcdOaZPzaE/z7Cc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c5d4458a1b0ba81cd641a45477287740.exe

Files

NEAS.c5d4458a1b0ba81cd641a45477287740.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 381KB - Virtual size: 380KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 362KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ