NEAS[.]ff351c1e05ec8e1f75a43a43d23bc7b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ff351c1e05ec8e1f75a43a43d23bc7b0.exe
Size

164KB
MD5

ff351c1e05ec8e1f75a43a43d23bc7b0
SHA1

54f4912e55023f3ddc100d05e01e2e16c17e5eb5
SHA256

4aefc500512cf66d8bfcdde239e59130715c8ef3523ab69b327e822afbf98f8d
SHA512

7ea0d1f115980b979ba5768296ace9cce32640a4d6f79d20a8bf548b8b1351afc5208f1c677e5eb864b5645b1e3e313ec01998d03f126a0ef41ec7e11da556d8
SSDEEP

3072:ohcq92nhAJCSosffKpXSJMT+mzMfU4Fm1MyWmribhhSxhAW:mUSUx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ff351c1e05ec8e1f75a43a43d23bc7b0.exe

Files

NEAS.ff351c1e05ec8e1f75a43a43d23bc7b0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ