NEAS[.]6a3d170cac382390bbd712d849d8f620[.]exe | Triage

Sharing

General

Target

NEAS.6a3d170cac382390bbd712d849d8f620.exe
Size

2.2MB
MD5

6a3d170cac382390bbd712d849d8f620
SHA1

cbe49e72c602bdd85f7c46823a3c2475fa1c18a4
SHA256

0eb5859ae0cbc574df922aeb4e1d57521a866cb197e86a1559e37f1b7c863986
SHA512

93551fcf61be50892e225ec4e203915cb80a5a1ca629e92b7be597b8535236d5b926cb67d1afbff30719c4ee3399957229096c80dddf0e83b7107f2a9b3384e6
SSDEEP

49152:7Ywmm8K1lQM1BtKo/8oWQIT6Wk+A8+/7RovsrM9BjXE:vml3OBtKC8l6qX4ZrmBj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6a3d170cac382390bbd712d849d8f620.exe

Files

NEAS.6a3d170cac382390bbd712d849d8f620.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ