NEAS[.]577675484ba393014a412b4bdba9d120[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.577675484ba393014a412b4bdba9d120.exe
Size

25KB
MD5

577675484ba393014a412b4bdba9d120
SHA1

8d224b2df933ba8198bd11cc9cb0082739348ac6
SHA256

b49b3e503eb94c61f596636c1fcad4457d4ab466d696efaf5a79532a2076b713
SHA512

2e0707472040ca1fd792d994b3e06048c8fc743be3239f2294f05ecc0c1c04253184242b89121ff8b7fc8e2f7df21123f1fdc59832e1ba552d1804eae7094dac
SSDEEP

384:WZMx7VPoNxGqce1HqF6WEINa/vfiNE1lLBPCdb8:WMpVPoNxGqdUI/tPCJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.577675484ba393014a412b4bdba9d120.exe

Files

NEAS.577675484ba393014a412b4bdba9d120.exe
.dll windows:5 windows x86

7cb82c3a18d10c4f91299936ddad9861

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

RtlUnwind
EncodePointer
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent

Exports

Exports

AeonCslExit
AeonCslMain

Sections

.text
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ