NEAS[.]5e55a6bae269f994766fb266b0642ab0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5e55a6bae269f994766fb266b0642ab0.exe
Size

240KB
MD5

5e55a6bae269f994766fb266b0642ab0
SHA1

e32db7e0709557e4ebd394a45513dd59ab7ffc53
SHA256

31cb5b7d4debc830e502601106c71a19b3e1e65b7714d6ea0ed63e465c7b6046
SHA512

a775caf0a3bb989c3aeb870603909fedf17a488dfc77c46df394e754dccce46f1a57acdf85030a8e4f009112179906f8ab26d8f620a69cf6437237bf28163715
SSDEEP

6144:M+mykdfiMBJLOk6TOcocewtJYdb6HwppF1QFHg:oQwF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5e55a6bae269f994766fb266b0642ab0.exe

Files

NEAS.5e55a6bae269f994766fb266b0642ab0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ