NEAS[.]af513816f66dfee1b8dc8bec4fd09a10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.af513816f66dfee1b8dc8bec4fd09a10.exe
Size

456KB
MD5

af513816f66dfee1b8dc8bec4fd09a10
SHA1

a49ea10985209e6d5a70eed59f332b2f22665ff8
SHA256

1c9bacf0272261676566b2f262d85ae072539b7d983b36878ce617e13786f73c
SHA512

5caab806c4fda97ae9d77093fbf0a483f2db81280979f82413eed95b66934d6b818d9c81e1aab3ca6b89d8aa61a7d8cdac6ead09ab6b10a41af1749bc56ce7c4
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5iioct0FCNU9bd9k8hM:/pW2IoioS6r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.af513816f66dfee1b8dc8bec4fd09a10.exe

Files

NEAS.af513816f66dfee1b8dc8bec4fd09a10.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ