NEAS[.]8b6cb5c92cc49c35a299a0fb0b05e760[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8b6cb5c92cc49c35a299a0fb0b05e760.exe
Size

408KB
MD5

8b6cb5c92cc49c35a299a0fb0b05e760
SHA1

1a562286fe7f9c85136e21989677a080b43fb432
SHA256

93b77b8fa142650a77954b0d5ece81b86f363d85968a5a67127119b515e3963d
SHA512

06e01be4ff98cd9b9cfa76da16e89149b833737a5b3328203d6be199d4b0356d817aef5fccb3847e17b22d0ef8e0815c40a68dead82f29884a059db7451667c2
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5wQTbHiQb+O:/pW2IoioS6Eg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8b6cb5c92cc49c35a299a0fb0b05e760.exe

Files

NEAS.8b6cb5c92cc49c35a299a0fb0b05e760.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ