NEAS[.]aad4a03affd8daaf145db2db7118ceb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.aad4a03affd8daaf145db2db7118ceb0.exe
Size

77KB
MD5

aad4a03affd8daaf145db2db7118ceb0
SHA1

38300e823066779bbc03e6df5e683c6eee3779ed
SHA256

4194de9364425996d35c096727298325e9b1d6b8b6e3893ef882412f4e190080
SHA512

3618c69304600f58a4277a0997eacca507fbd4f0522d5b7c31dce2f2d2f461051fc72c5053e832e8a468366b73611ba5f779894b6edcbb18006f244de01e4865
SSDEEP

1536:tyZA/PHe3PLpFgpFxQ4hH5oSuvTDIVl2Cafa1eaI:tyq//e3jiFlZoSuvTDIVl2CafhaI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.aad4a03affd8daaf145db2db7118ceb0.exe

Files

NEAS.aad4a03affd8daaf145db2db7118ceb0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

?0Ot^O
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ