NEAS[.]d5ef57dd4dca40d669e5c4ce930c5650[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d5ef57dd4dca40d669e5c4ce930c5650.exe
Size

7KB
MD5

d5ef57dd4dca40d669e5c4ce930c5650
SHA1

c6144dc27ccc1dac847f940de99dd289a480d926
SHA256

f1ef2177634081e9f6b1826fc9e14ff9462bd1ac5524e6b3b7dfa4921fc3965c
SHA512

9d38f40dfa22a016cbd4f3c1f9081d1d6fef8b5f7cda5fee6ac434003b22df3914c862af2a47107007ca1257ff29374a53031147162ac3a6eda5810244b95911
SSDEEP

96:6j8WM7EczEDq/nLHbhSg1Ez2ONwPpGepMKZwh8S:wxM7EcMELHbggSzpwhGQMr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d5ef57dd4dca40d669e5c4ce930c5650.exe

Files

NEAS.d5ef57dd4dca40d669e5c4ce930c5650.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ