NEAS[.]dffe86558af920565d35aacb3ecba8c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.dffe86558af920565d35aacb3ecba8c0.exe
Size

229KB
MD5

dffe86558af920565d35aacb3ecba8c0
SHA1

44c4ae9684582e8d15612e1d1bc295ed20a14365
SHA256

f1e33afd83e18dd6d8dfcce6c3837535271bdc8b0dee8574ecf17d4ab99c2541
SHA512

259aff96ca0d89f2b4067cdd9803236008656541729499bd455eaa116adbd2a21ae9c24884d754f4ddec9bfb486081fc2c2091a56d9af5aafa06f204ef190cca
SSDEEP

3072:bRUwftM6H2h2maZfgHjbZ0/VmhM/27YFZV4+rvE8Grr+17hkUvL01CWUKPurUWTF:tUwZgZyi7YGygU41CWNurUm8l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.dffe86558af920565d35aacb3ecba8c0.exe

Files

NEAS.dffe86558af920565d35aacb3ecba8c0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 227KB - Virtual size: 227KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 720B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ