NEAS[.]10b69de6f52c8936ed25e48a682c8630[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.10b69de6f52c8936ed25e48a682c8630.exe
Size

494KB
MD5

10b69de6f52c8936ed25e48a682c8630
SHA1

1831dfec811c00fcf3f623a1d91177a4895f920e
SHA256

81f64ddb882ce143bc59abc43bc887e37cdf07ca1cbc8afcbe227a8f2d25204f
SHA512

fbb2217361c59cb4b2545fa1ae93a7a235254d496b556f41d6022f7c0fce1279649877d8652bf4249b2fc521081c6fe297a6c30c4c502ebdb84599501479b688
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5iinNrv2zGJIKVZicAnA2Df1sm0p8kdyE:/pW2IoioS6lVDwE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.10b69de6f52c8936ed25e48a682c8630.exe

Files

NEAS.10b69de6f52c8936ed25e48a682c8630.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ