NEAS[.]fa73afa6c0b8b6a59a93493b3f2a4920[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fa73afa6c0b8b6a59a93493b3f2a4920.exe
Size

134KB
MD5

fa73afa6c0b8b6a59a93493b3f2a4920
SHA1

7ab91e9d038cf4ae0ace8d942bfb38074ba42ea8
SHA256

47354eed821d1f8f740ce1829fb755988b8bb8bb10b3b62b49cac6bf26452d23
SHA512

81e40f4b5c0dd4b373ee511de4cf478f8cc1028bd5fff92cc387355ba630e443bd78c5416add5d131490e64225a1b4d35123076938319c432c0afbd0200ed4ed
SSDEEP

3072:sSQzlsb4cMmn20lBWAYjD1+C7Ryu0ZgPCBFZD:sSQzlsbX5nxmG9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fa73afa6c0b8b6a59a93493b3f2a4920.exe

Files

NEAS.fa73afa6c0b8b6a59a93493b3f2a4920.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 122KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ