NEAS[.]4f79541acc8f3dfd12e97d4c8ed96cf0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4f79541acc8f3dfd12e97d4c8ed96cf0.exe
Size

11KB
MD5

4f79541acc8f3dfd12e97d4c8ed96cf0
SHA1

03512fe92b9b47947346e3afb942a5c02c9bb64d
SHA256

32a1533c61dfa14a9af80888cca081e4caf2b3d5a7839876478c855dc42ec0ab
SHA512

4f682e94ab69148ced79ebee8c8039b348559c805eea2df8bbd48400b9c079ba24d34aa5bf5a469f1ad4237c429ad0721b19f69eab2428c749a26fae177f73be
SSDEEP

192:vn7WXI11y6Ozw3ZFF2bMT0zmyAGzDPRSrd:vn7r1IwN2ZznpzEd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4f79541acc8f3dfd12e97d4c8ed96cf0.exe

Files

NEAS.4f79541acc8f3dfd12e97d4c8ed96cf0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 864B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ