NEAS[.]7739afa58045b912f7c0e48eb4a4b970[.]exe | Triage

Sharing

General

Target

NEAS.7739afa58045b912f7c0e48eb4a4b970.exe
Size

971KB
MD5

7739afa58045b912f7c0e48eb4a4b970
SHA1

879f576925236e983718f22997b7c988cf3202f1
SHA256

81330d00bf8645bb734106b8b2ee055f41f6c3f3e10e563b9eac99f95ab7e6ff
SHA512

1a6383221286ff358f752b68e2d20a1d2cb50f9172c5801e40f6c6df33906defc39fd2ba292fe0fbf121db133a8715bf8e90e9af26619936bbd4d6cb5addadfd
SSDEEP

24576:zxTJTE/ifDifajPLguqpRYJYE/wDxIjgAGchwJ0g1:xJTEOiaITYJYE/wDxvA5wJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7739afa58045b912f7c0e48eb4a4b970.exe

Files

NEAS.7739afa58045b912f7c0e48eb4a4b970.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 854KB - Virtual size: 854KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ