NEAS[.]4c99b298fa90dbcc2fbbdfb61a132520[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4c99b298fa90dbcc2fbbdfb61a132520.exe
Size

205KB
MD5

4c99b298fa90dbcc2fbbdfb61a132520
SHA1

56a2ce5b6aed867d7076958c9f8d0554f6acd67c
SHA256

d761c075a2b2fa8c092870f1ec10b06e8795c1601d42484a9e123e1e2965a912
SHA512

75f569aa188f52c3ba6d4ecb74e9608728d6d284f569d51e009398359810f40f1bc5f67eb7a7ed0c7a6882b3b4d4791a60520298d6c4ec9a63646732fb0c6e40
SSDEEP

3072:X7y2IQ4heZ1SBa8OtMzd3Infmm8chuJSkguwpOvSgJhkWmhd9xwrh:XmLdK6afY2uJt1wp5gJuW09

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4c99b298fa90dbcc2fbbdfb61a132520.exe

Files

NEAS.4c99b298fa90dbcc2fbbdfb61a132520.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 203KB - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ