NEAS[.]d2b814e72c71da2e4572cd269fbec4e0[.]exe | Triage

Sharing

General

Target

NEAS.d2b814e72c71da2e4572cd269fbec4e0.exe
Size

1.6MB
MD5

d2b814e72c71da2e4572cd269fbec4e0
SHA1

1e837abc6869c31e290e5f8d40db2096e65ccf0c
SHA256

50f32676128b3259274fc39cb714226df16e4f575ce05623c3923f9c30b77cf6
SHA512

d08fc75f50d7871865b5e121cb30e092efa9c081414948d4d01e9dce5a75d85fe7d6fe5f623a494a34a033523270955587c1f476fa184fafc93ab08c91f8951d
SSDEEP

24576:cNYNCx/x3SQmmrDx0qpPCKvQZ/LCAV+NmFK:cNn/x3PFnpPCb8AV+NmF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d2b814e72c71da2e4572cd269fbec4e0.exe

Files

NEAS.d2b814e72c71da2e4572cd269fbec4e0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ