NEAS[.]3860f792c9380f738767d60e3a131b70[.]exe | Triage

Sharing

General

Target

NEAS.3860f792c9380f738767d60e3a131b70.exe
Size

453KB
MD5

3860f792c9380f738767d60e3a131b70
SHA1

f5ab03bec5142df1f9f1da21d0ab94b6b16af94f
SHA256

a3c1cd1dc34f5f4bff73ff39e4d0a59ed849c439092cda0dfd4545fcb5502033
SHA512

59c28529d94fc02d14e267e8d1442bf6ff4afa6d41ddace7fa7681a6ac2d2ec74723a00b69dff027f0e7e462c4824f477d8673b5464d3a07b5d6583d86efa36c
SSDEEP

12288:xrknxPy/fLJD4q85ZMy4R2U5wkAo+y8tS0154os8V:qxw82XR2C/AN1tS853s8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3860f792c9380f738767d60e3a131b70.exe

Files

NEAS.3860f792c9380f738767d60e3a131b70.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 451KB - Virtual size: 450KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ