NEAS[.]da9203c3791e283b2ee5dac92b5c5490[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.da9203c3791e283b2ee5dac92b5c5490.exe
Size

27KB
MD5

da9203c3791e283b2ee5dac92b5c5490
SHA1

aec06184e5f4b633e3884479a1f1d595954f37f6
SHA256

0a20e71555123d966535cbc0b5d5716a485ffdfe2cc22815340ab25ab5b9fa4a
SHA512

004f4b2eac702a04bac89c60a4e58ce8f4f36668765968b5138ff44ba41e6fa4df58448c95191096418901583969b94b30dd5d08be5cdc0f4b445ac81e3d5720
SSDEEP

192:ckHG3NTxF3VZC5k1dZVVnlYJLeYEcwaWcIRU5LpnhyIAirXmtvW3JWkUqd:c4qzu54fIaFcwaTr5LpnhuirSoWR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.da9203c3791e283b2ee5dac92b5c5490.exe

Files

NEAS.da9203c3791e283b2ee5dac92b5c5490.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ