NEAS[.]c6d7484e2736d9412f11b318de4c9d50[.]exe | Triage

Sharing

General

Target

NEAS.c6d7484e2736d9412f11b318de4c9d50.exe
Size

459KB
MD5

c6d7484e2736d9412f11b318de4c9d50
SHA1

cee1a4a2a2b359e040d1cf18155dfe865ebda158
SHA256

a53f157b4b813a6ce4bf006aa37d917bdd790c1d6ab09157b34f04f4cd4935d8
SHA512

6314f92ef0464dee1b814b29762e19e7897acdbe486a6515269e9cd9d5ff6a6af7dd3fc1bdccae1c4fe1717cb9728a7ad0cbc097420ed3d276d082b9d2d6c3ca
SSDEEP

12288:sZ2DvEU8n3aazd5EvtYzxj2s5Ro99FHJgypD:soDkqjtYtasCTJgmD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c6d7484e2736d9412f11b318de4c9d50.exe

Files

NEAS.c6d7484e2736d9412f11b318de4c9d50.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 425KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ