NEAS[.]ef836f5849e1748ad28f09ac8cb15100[.]exe | Triage

Sharing

General

Target

NEAS.ef836f5849e1748ad28f09ac8cb15100.exe
Size

227KB
MD5

ef836f5849e1748ad28f09ac8cb15100
SHA1

e9ae552dcb195b7fab2a92fc21371ab81e00c134
SHA256

1ea8d8ccc0f891ecbf8b087b74f1e8816fff3fd9b9e020134516f256ffc19b2b
SHA512

9169bf12dd91008ed5c1ae6a810af2439f97c3899d16708197bb3bf3bd8a7a1d9caf919f5a15eba08667374a5ce48cb61967b3d9c3659a6bec6358ef54a4a973
SSDEEP

3072:ZAPiMhxAaBlqcJzWVhd3w+SM8he6W0QTnOzTE7APiMhxAaBlqcJzWVhd3w+:66G7qozWDdzSzho0QTns36G7qozWDdz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ef836f5849e1748ad28f09ac8cb15100.exe

Files

NEAS.ef836f5849e1748ad28f09ac8cb15100.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 129KB - Virtual size: 129KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ