NEAS[.]57788178353bed1151c8570f23636690[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.57788178353bed1151c8570f23636690.exe
Size

260KB
MD5

57788178353bed1151c8570f23636690
SHA1

363b4250a741b1d27a529f458043f9cb4f07a1e5
SHA256

271a391c8dbf86b53914881b968728fa7b5bb5432cf92c4105727958e4600ea7
SHA512

2578dfb4caa073efb6a6ec2b0737974052dc77c2701bf18aabb696c699e3bea8874b9f770cfe4ed858d6d2a8295b61daf61afd5ef2a0e207cb7fb607f6e8bce0
SSDEEP

6144:DRPI7Www0TBkS+oWqjL21ccj593bLeOF1PkhwzaLToaTVjI1rvlpABK4JhTATrNf:dDCt+hqjC1xp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.57788178353bed1151c8570f23636690.exe

Files

NEAS.57788178353bed1151c8570f23636690.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 232KB - Virtual size: 228KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ