NEAS[.]4a9c5c089758b3ba9b8a25be484e7860[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4a9c5c089758b3ba9b8a25be484e7860.exe
Size

4.0MB
MD5

4a9c5c089758b3ba9b8a25be484e7860
SHA1

5deb8cd5315833cb401a50256ed03c26f3d095be
SHA256

331dc3b34e2db6a93802207e914cce07a8fa33bed6ad6d7f264cb14085c2db64
SHA512

df9d79d316600c68cb66c155a0b61977666a3c4fa4b2e0ca410d46e24eeef483888cada459afde1d7e5fbccb00e7f5f9f2eec60e3194d1e556846725fc66a138
SSDEEP

98304:GsA3m7vcCvuFIco9p2EGtyXfiw329u25i4aOc9wpUITzu4IBx:GXavJWG9pZXfiwKu25RaOc6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4a9c5c089758b3ba9b8a25be484e7860.exe

Files

NEAS.4a9c5c089758b3ba9b8a25be484e7860.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 4.0MB - Virtual size: 4.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ