NEAS[.]18de5f265eb2c9c5593ac7564dcb0020[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.18de5f265eb2c9c5593ac7564dcb0020.exe
Size

446KB
MD5

18de5f265eb2c9c5593ac7564dcb0020
SHA1

6442daaa3a5da6847d2b3c059f21244a812df632
SHA256

8fece1eb988c486a9dbec36eae3a370671e14e097e6ec277c69f43907e9826a9
SHA512

af08e316506eed15124d360a8cc2797df500f62999f7ae6a9c838ac4f56bd92164133525c8984ce742c7fb71b40343fb2aa7ba0e5278ad31e656fc3388d4b929
SSDEEP

6144:0/gsvssDpvaxYHLRkaZwtbcIQzEW6mnB4smvqcv88d8jd:0oICZcIY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.18de5f265eb2c9c5593ac7564dcb0020.exe

Files

NEAS.18de5f265eb2c9c5593ac7564dcb0020.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 266KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ