NEAS[.]fc219ddbcad773b89f2eb817171c13a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.fc219ddbcad773b89f2eb817171c13a0.exe
Size

156KB
MD5

fc219ddbcad773b89f2eb817171c13a0
SHA1

094c4ef5554628d3d3b9258dca087da4f290acac
SHA256

90bf7d569da3f2dc8d457815a70632245e9ebaab5b30ed9a6589be31ed6a2802
SHA512

047559cd2249f3cffe3532752e4e1cde9e8f93b13edc7e01fd4e14d3837f7cb9a3ddadc1b5d828e6a976cce568a2e66ab57e181f27c7cd0b474dd47290319c18
SSDEEP

3072:ztgPCmByk4u5v5c1smXzScJh496CDYEeYNqz6b:21BykAxXJwUCDYEh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fc219ddbcad773b89f2eb817171c13a0.exe

Files

NEAS.fc219ddbcad773b89f2eb817171c13a0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 143KB - Virtual size: 143KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ