NEAS[.]56946a2919a785b43e6c1268825124e0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.56946a2919a785b43e6c1268825124e0.exe
Size

496KB
MD5

56946a2919a785b43e6c1268825124e0
SHA1

8b070a0b5cd77024fb3690ff1688d9cd5581276f
SHA256

c9c655987ffdfe58d5cbf33c613360a5bfbb1a340d60e15837cca835945def72
SHA512

6368c8ad87f31f940c118ec054a1ef150b486b70b48854bb2ae70b73249bff03b6bb285de06f1b13ac62ed7f11e860a2a813b421b2662873b64cb30a32fab4a2
SSDEEP

12288:rQNlSnCtd03QIQUThcse57CtWindbUdlwrW:ENY4jtseCdbi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.56946a2919a785b43e6c1268825124e0.exe

Files

NEAS.56946a2919a785b43e6c1268825124e0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 470KB - Virtual size: 469KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ