NEAS[.]ebb3520bd14804393aaf25c40e0a0df0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ebb3520bd14804393aaf25c40e0a0df0.exe
Size

6KB
MD5

ebb3520bd14804393aaf25c40e0a0df0
SHA1

d2dfd6a57a8cd2ac8cd27cc0f30a81d1aa457f8d
SHA256

10939f9ddd2c7adb0062807263757ed52bc9ae351be741dddd4fcc91db100255
SHA512

cec6e833279e7ad23b887ed3f5679e17dad26839a853e1ae16fbffd1b5d9495fcb3c5122f0fa6bc54fc420d8acd0369cb2ea8f3c8b72f2d6e8ec7a17aa767c99
SSDEEP

96:/H+lj9YDhx/cHyTqc8AU7y0Lz88tLSOBOpobQw9YFZK:/HQYb/Zu1ym88tUfkT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ebb3520bd14804393aaf25c40e0a0df0.exe

Files

NEAS.ebb3520bd14804393aaf25c40e0a0df0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ