NEAS[.]16a1678a697e85e1f20a8ddc44f4faa0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.16a1678a697e85e1f20a8ddc44f4faa0.exe
Size

700KB
MD5

16a1678a697e85e1f20a8ddc44f4faa0
SHA1

5a7f221d1ce0913eaf1513deb149e00ff85ec6b5
SHA256

90d72ca8145cececddaede260d6908ea1387a539adb99d89c65d2b973328ca0c
SHA512

66a134d07f069a53522203fafc7cdb11c2965100faeb327da01096d629675894c8e2859ab373a0791cd126ed6df258507fe68fdb0bc09efe3b088a36c782c257
SSDEEP

12288:3Kzz7OIYbSXabhklJrvFR2r2iCQ2QCv9OTR:3kKSlNqz2fOTR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.16a1678a697e85e1f20a8ddc44f4faa0.exe

Files

NEAS.16a1678a697e85e1f20a8ddc44f4faa0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 444KB - Virtual size: 444KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 254KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ