NEAS[.]f502c60a4b7c0038e2a01f91c0cd5210[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f502c60a4b7c0038e2a01f91c0cd5210.exe
Size

2.5MB
MD5

f502c60a4b7c0038e2a01f91c0cd5210
SHA1

f98b9601e1914dbf0050a50e1e09d2875187de4d
SHA256

ad543f9233bb793774641aa14c1a121c992c0a3d3798a8662852b48eea91371d
SHA512

cbc51ed39bf2a39ebd24258c205787a6403894b5341e8828c4b32acfaef1d9adb0a24cca0ab3627686851c822b34e75445e7e771f424704675844ad616d3379b
SSDEEP

49152:2MA0tfyCeetTEmtFMA0tfyCeetTEmtUMA0tfyCeetTEmtnMA0tfyCeetTEmtXMAw:2atfyCey4matfyCey4/atfyCey4yatf0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f502c60a4b7c0038e2a01f91c0cd5210.exe

Files

NEAS.f502c60a4b7c0038e2a01f91c0cd5210.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 186B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ