NEAS[.]d647d9e1fc0df0d824749b4a7c23d620[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d647d9e1fc0df0d824749b4a7c23d620.exe
Size

8KB
MD5

d647d9e1fc0df0d824749b4a7c23d620
SHA1

4f932a7c931af82c357b9d6e9aa7eb3aca2245c3
SHA256

71ae5e84cfbb90dd60513f8e4f893d28c3ed89a429da235da9941663525debd5
SHA512

8a581d3e4950e748e6c01b248419774101ce7922967113ac2fea3660a693e79c5e4f794d10050730b86fadd0c17a4d95061e10bd456554ed43953105b6a630fd
SSDEEP

96:11jy8SOX5RVt+Bdf1edQ0fOeDEHqf3eH2B4yTjvpllQ5zNt:11u8SUVmfIdhEHqPUyTjT+7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d647d9e1fc0df0d824749b4a7c23d620.exe

Files

NEAS.d647d9e1fc0df0d824749b4a7c23d620.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ