NEAS[.]27c59cf01d8cf7bb8ba0b6709f30d350[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.27c59cf01d8cf7bb8ba0b6709f30d350.exe
Size

578KB
MD5

27c59cf01d8cf7bb8ba0b6709f30d350
SHA1

8654b5edca35ae175c1367c2cacd92b615f653cb
SHA256

bc4614628827ecec9eb3f942c694e8c0dde2cf22d4c9409a5734696c88751903
SHA512

a6d45465e32b9c7e8f34c0190ea09fa45d48472b99a78d2608d1a5e1150f0f015f49ab2e1bff16517ec7dd726d210c69d7db75ae2b7e2721c88478452a0e85b2
SSDEEP

12288:Mtrylcr8/Vs5JsWtrfmOnP3/VqYk1vp/e0nH+waSwHOIPvE:Ukc8WXsfT/eqH/9wHhPv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.27c59cf01d8cf7bb8ba0b6709f30d350.exe

Files

NEAS.27c59cf01d8cf7bb8ba0b6709f30d350.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 570KB - Virtual size: 569KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ