NEAS[.]529972f6612238d649bbfddc98e5d690[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.529972f6612238d649bbfddc98e5d690.exe
Size

52KB
MD5

529972f6612238d649bbfddc98e5d690
SHA1

71c12653313a3418fe060b2249715d312a201f7a
SHA256

daaa2ee8c3dfd669a204f7f9264d3fec964c458fa2ae0c1a65b41e9c8412e89f
SHA512

b371a28568cea214f231b6fd1885013619f6effbb1f2ec04df38b3fcecd8446f50ca1833995bdccf53bc0852a2ef57791bb653b3b7e421584fcfd17c9ccdd16d
SSDEEP

768:BJ+xogVdiH7iLoFduXTpA0Pcb0RX4Szk256ZgZrFZ:6oCXFPs0RXN/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.529972f6612238d649bbfddc98e5d690.exe

Files

NEAS.529972f6612238d649bbfddc98e5d690.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 40KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ