NEAS[.]d2937b7f6aaa5f6d8014c897c7a3cf90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d2937b7f6aaa5f6d8014c897c7a3cf90.exe
Size

11KB
MD5

d2937b7f6aaa5f6d8014c897c7a3cf90
SHA1

205bdca487fa1a3a2d876d6774f724806895ef8b
SHA256

5a6c5f8286f25549ac489e1500b54af42034197078f909a2c1c133690935b091
SHA512

c7bdc60788e3d9571b708e114434b2e819b15f725fe89a26e8b87285cd5b3d80631eee12220f1fc27d5adb74c40acc0da0005a97b8f9a499f4f755434ead258e
SSDEEP

192:F1kZeR4dsQv1qnWDuX0n2r0vcKrsmwkC98yhkuXau:wzaQtOcAkobKrXwkM8z3u

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.d2937b7f6aaa5f6d8014c897c7a3cf90.exe

Files

NEAS.d2937b7f6aaa5f6d8014c897c7a3cf90.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ