NEAS[.]e5bc8bc3b43192a6be79fc2ba3c3fd90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e5bc8bc3b43192a6be79fc2ba3c3fd90.exe
Size

445KB
MD5

e5bc8bc3b43192a6be79fc2ba3c3fd90
SHA1

ba5bb030803e85642877da05f868889eb0df9473
SHA256

726f4f3b2b52922ab9f2e078b3396ffb847d27b9680fbadad44b4ab59bc5b7aa
SHA512

48b56cfba26e99755d560b5079ad83aea7b9275f3c0c5c23377f0a1f272f3f1275ec740d605f6d39f110a79a12813312f2cea49de251ede70001cae7b3e6dc92
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5wQGQRe4evdYV9IzppxiB9/NFQcw9RBJ:/pW2IoioS6S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e5bc8bc3b43192a6be79fc2ba3c3fd90.exe

Files

NEAS.e5bc8bc3b43192a6be79fc2ba3c3fd90.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ