NEAS[.]12f5f58871e1509d1484d0c366477720[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.12f5f58871e1509d1484d0c366477720.exe
Size

420KB
MD5

12f5f58871e1509d1484d0c366477720
SHA1

692a2f924f76723b469163a9c793422482cc2257
SHA256

7ede7cee74dfdb8426300d19ee0624cc4c61d8cc5b1c9b157fee64a27fdff81f
SHA512

9d571a159f88b641d72c6717905a868d65b39829f8a02bc935049802026775530df44453509eda48083b1b4261b5ebff044ee486b2b09555bcd818f84b9e6af7
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5wQTbHpIzCOGskrY6Tla:/pW2IoioS6U0E

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.12f5f58871e1509d1484d0c366477720.exe

Files

NEAS.12f5f58871e1509d1484d0c366477720.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ