NEAS[.]c4a7dfb7a3a4b576ec172c519d210fd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c4a7dfb7a3a4b576ec172c519d210fd0.exe
Size

4.8MB
MD5

c4a7dfb7a3a4b576ec172c519d210fd0
SHA1

155565427de0111e5975d3b9666f099124334af3
SHA256

519855d287a2ee22da5f681abea13b7b5b8ce5d9abdf0d1818929a6e4bb30e39
SHA512

1c861b51a4fb1c97f8db1bcd6d514bce37619fac07f6c22869ddcc1742dbb71ef5a2978091e424a75009bd0681b31153e27083a190a6b6e3abc16fe3c2cbf2ad
SSDEEP

98304:MJrCyxRpKI+lQEXKQf0ZxdtcyoRpQvDO49juN0i+gcQaIa/:eCyHpKIOXKQ8Zxbnvy49Kei+gMIa

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c4a7dfb7a3a4b576ec172c519d210fd0.exe

Files

NEAS.c4a7dfb7a3a4b576ec172c519d210fd0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4.8MB - Virtual size: 4.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 142B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ