NEAS[.]3ab58caba02945cbc37a433ab78d9720[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.3ab58caba02945cbc37a433ab78d9720.exe
Size

169KB
MD5

3ab58caba02945cbc37a433ab78d9720
SHA1

696193f66fceeae4615d3bf186427f34c34957ea
SHA256

02410feddcde3b376115becd5c41d80a1efb97277b6ed1183cb3dcc3ad1db137
SHA512

3cd1f973ab5f2ebe76d12419abfd48500cb5922857dbd346d77797adc883676474d8498655fc801be137e7446de9a6b8717821ab787a588186633bd05546bf7c
SSDEEP

3072:6QZdIF4R+cWWAMJfOSvc6HwmTUUBpQMj3UwFgNfXPYzCFgegL2wZOy/:DTWTG2wZOy/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3ab58caba02945cbc37a433ab78d9720.exe

Files

NEAS.3ab58caba02945cbc37a433ab78d9720.exe
.exe windows:4 windows x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ