NEAS[.]89a0560a725b00e2494f9beb6b3efcf0[.]exe | Triage

Sharing

General

Target

NEAS.89a0560a725b00e2494f9beb6b3efcf0.exe
Size

410KB
MD5

89a0560a725b00e2494f9beb6b3efcf0
SHA1

2b49e43e944b2d7b48321f61ecbd6c31101586c8
SHA256

e7fd4879cc34588a257cb0000ccb5052a0012f3d0e9ba8b969829abde1981171
SHA512

7d6f1f0220f68b96054c4085a961792ff304e4a84fc9f5fd23c90a498a5380546ae2fda372752f933de8513ef7a251f4dbc0629a2f54ec110cddae9567ebbd71
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5wQGQRe4evdYV9IhJeaogx:/pW2IoioS6q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.89a0560a725b00e2494f9beb6b3efcf0.exe

Files

NEAS.89a0560a725b00e2494f9beb6b3efcf0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ