NEAS[.]14a9e50bc54af6db6c472de395023860[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.14a9e50bc54af6db6c472de395023860.exe
Size

469KB
MD5

14a9e50bc54af6db6c472de395023860
SHA1

de23ba04ce53cd73df110930261f2031e896be7c
SHA256

c6ee8bf9ea499ff93964e1effcc083035a978bc3d4392a9f29f2ecb1cbfc38c5
SHA512

2ca671c3857c20107fab409c9475837c5d4a3054da4aea5730b9645b45b45b42edbbac91ee6c8a464fc42d00efe27453a53bb66d883b7081c71995f98ce2ce12
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5iioc+nBkl7qCJzk+e:/pW2IoioS6Fze

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.14a9e50bc54af6db6c472de395023860.exe

Files

NEAS.14a9e50bc54af6db6c472de395023860.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ