NEAS[.]e73794e569c0f296396201772a8d4940[.]exe | Triage

Sharing

General

Target

NEAS.e73794e569c0f296396201772a8d4940.exe
Size

186KB
MD5

e73794e569c0f296396201772a8d4940
SHA1

1973ede9aa32fa01bcc1500c278c5b98c910f9c6
SHA256

e364d391f966b82ea899136c47623eee703966ef1dc1cd978253b72d3d708f1a
SHA512

9c21499b9c8aa09e65e7dd78510f6a29413aad85f313a732aaae157d9bf23b467338e1e9a87c7a09be9c41f989b33ac984e9cc710517ba37a018cd25e64f4ceb
SSDEEP

3072:JZAhk444WwFWaaj42J44RKIa6WkQ3zQ/h0X5kMsOxyltSYZe2QQX5kMsOxylt:JZGvNVaR5RhtWkoiA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e73794e569c0f296396201772a8d4940.exe

Files

NEAS.e73794e569c0f296396201772a8d4940.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ