NEAS[.]e5546257be2bd16b5dbd2a7369bdd090[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e5546257be2bd16b5dbd2a7369bdd090.exe
Size

38KB
MD5

e5546257be2bd16b5dbd2a7369bdd090
SHA1

2c3939eff0d5999ab6363237beacebd74b192593
SHA256

7cf88b6b4a070b5946e6ccc9f637130a7945a24c0e20fddf76d40f87c9e39de9
SHA512

be08a36c85169a42d8347f86aae32a071fa2f518aa497f8633cfe8006aa1280052b5c81e24f855c91ffc12c87b9509b8426f6f5d96c0a313c12b826b4e058d27
SSDEEP

768:8HdzRHSsT8DX6ftSyzRW6PpS+KGqQKMQ7juhcTtCwzT:ezVS0wpmRW2kGR2F

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e5546257be2bd16b5dbd2a7369bdd090.exe

Files

NEAS.e5546257be2bd16b5dbd2a7369bdd090.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ