NEAS[.]28d7ed4aad5d44b8d36689e688857e10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.28d7ed4aad5d44b8d36689e688857e10.exe
Size

1.0MB
MD5

28d7ed4aad5d44b8d36689e688857e10
SHA1

5e402fb0e6ea512362e9f2d9292a6cbaf035b361
SHA256

8a400d5cc4348ee7da4f84b0a00ba7860a8ab8692b2dfd67ddff2446bada5e25
SHA512

5cc9a8a9a973eb569ab9f114c0b172a4a07b369f56916ee6856dfa9ca6bd11fa425819f9f824c2be2ca81cfa3d7308b4a8fea9e9b873e2076dd3c3135261f009
SSDEEP

6144:mEWFzx73wy7wRd4ThExZSmPrKFy9ShGbcI7qLgXpCOG2qUlj/QfPNJtdn7SXBAS3:mllx73JYzxZzYyl17H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.28d7ed4aad5d44b8d36689e688857e10.exe

Files

NEAS.28d7ed4aad5d44b8d36689e688857e10.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 736KB - Virtual size: 735KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 292KB - Virtual size: 290KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ