NEAS[.]1449a407f6a0de9193a53bb399a7fa60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1449a407f6a0de9193a53bb399a7fa60.exe
Size

108KB
MD5

1449a407f6a0de9193a53bb399a7fa60
SHA1

dfb6bf3a95137b6c3056ed8bb43b4c8271ff2e28
SHA256

0491cf9dd8eb3c5b20edcc4fc9bc274ad5854aa54281bfce45ab3939fe692cf0
SHA512

e93e170b75a5ccb8a3b1f2bdd28969df2e378d15d01286b34ee7fb6b3514100d66dc11858d96024b3b6a120177b6db757f557af446ca4f314e1269330fbfe6ea
SSDEEP

3072:l+ZCpWGE2iI4t/kOFPUqBQEGPgxyZLEMDtOG1PAwvx2o:wZ+WHlvtlkgxyZLEMDtOG1PAwvx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1449a407f6a0de9193a53bb399a7fa60.exe

Files

NEAS.1449a407f6a0de9193a53bb399a7fa60.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 106KB - Virtual size: 105KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ