NEAS[.]30f6552be5b433fe6407bc09c2450dd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.30f6552be5b433fe6407bc09c2450dd0.exe
Size

799KB
MD5

30f6552be5b433fe6407bc09c2450dd0
SHA1

111d17f155b4381d1534d73dee78aa8120deb216
SHA256

88b5027347509dc8a2cf8b26402d58736d43edfc924240960f75fa4cbe94a4ed
SHA512

d6df02765eb2115a6925424b514c6e27c6d7cbb38b34c4d5fc1221bf7b2cb85a576510e4a074dfc9641acbe877faa3bb4602c41f6226acf4bcf4dbfe6d11a0f6
SSDEEP

12288:7jLjGjQ7YZt1vd1itLt+R7YZt1vd1itLt+i7YZt1vd1itLt+kj:n30Q78d1i1+78d1i1r78d1i13

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.30f6552be5b433fe6407bc09c2450dd0.exe

Files

NEAS.30f6552be5b433fe6407bc09c2450dd0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 743KB - Virtual size: 743KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ