NEAS[.]c4f7a82b89c08fdaef2367cd1cd56ba0[.]exe | Triage

Sharing

General

Target

NEAS.c4f7a82b89c08fdaef2367cd1cd56ba0.exe
Size

1.0MB
MD5

c4f7a82b89c08fdaef2367cd1cd56ba0
SHA1

3620af49f8cf65e97de7994e013097bad0487671
SHA256

d530440c1108a98bbe761e42c3d4d17393f6b000eb3e5285eb932e2279a52faa
SHA512

32de4ce88992edb33c8ab0c9dd07fc17393b4be329e09ffb55c459fe45b24c33300e5acb4afbc2003426bccdef9c37c627e7714479c7128765ff1af78318d1f5
SSDEEP

24576:0pu0QwUam1imXQR5RSt8VqqUUUUUUpUuVs36Qz:0pTItTXccqUUUUUUpUx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c4f7a82b89c08fdaef2367cd1cd56ba0.exe

Files

NEAS.c4f7a82b89c08fdaef2367cd1cd56ba0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ