NEAS[.]9b8e25761ac4b0f3f0d272e7edc6a240[.]exe | Triage

Sharing

General

Target

NEAS.9b8e25761ac4b0f3f0d272e7edc6a240.exe
Size

61KB
MD5

9b8e25761ac4b0f3f0d272e7edc6a240
SHA1

20f7301b467a7caad14a3000a8d9ee7f27d3ccb8
SHA256

fa608f0b7bd79c178f97f672371b193e53285c6bfa263ea7f5eb60da5562d4d9
SHA512

4fe316cab8d1db6c5d23be30665eb945398ee04f49a5c7441416061a8c9a548dc23a0643a145713e2072c5b502b3fd2d5914f46c48aa037ed2caeebf9121da66
SSDEEP

1536:Lg0flFtsMkVCiUfNflzzFXihL7y4adYsw/xB:0SFtPkVFUfNlZXWL76c/z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9b8e25761ac4b0f3f0d272e7edc6a240.exe

Files

NEAS.9b8e25761ac4b0f3f0d272e7edc6a240.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 58KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

!Sugar
Size: 512B - Virtual size: 2B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ