NEAS[.]712fb52bcba8d7b39ded019f5f311f10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.712fb52bcba8d7b39ded019f5f311f10.exe
Size

197KB
MD5

712fb52bcba8d7b39ded019f5f311f10
SHA1

84669de033ab9b4f0150df5dabd4f0d36f057d03
SHA256

d95e80c88c26ad9beca2828cce3b0ffeee81a4b9d3a804cd5fc1adab9d35234d
SHA512

95e242c21ecc4a84615af976d5d31a3a5884a1b4f8f7a7a280499481047abfd4bbd874b5f3d851110698e69fd6dcb8d23e375dbd36a4d4af9268823d66a443e5
SSDEEP

768:hR4TOHEQtBaHh6BHaZrmqoaqxsC7Sy722ZZ1ctaLqWUA0Y73RA0Y7Y9Zr:oQtBdHa1Z3UxZ1ctaLLL+SR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.712fb52bcba8d7b39ded019f5f311f10.exe

Files

NEAS.712fb52bcba8d7b39ded019f5f311f10.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 68KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ