NEAS[.]06404d460b33568d102ca08c0577c250[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.06404d460b33568d102ca08c0577c250.exe
Size

467KB
MD5

06404d460b33568d102ca08c0577c250
SHA1

b3251235c980daf91a15840f665278b3989fdb4d
SHA256

991e0c7214937cc06d934aba029445f6d9f1aa3367f9ac8dea084fb59c8dac06
SHA512

e3ab92d2cd7f029087aa56c27519929ce89f7124e4c27ef49edbfaa4a1bd5c79121685278cb281881c85345d33a402db97c964030b00a4170b5a1f7430c0ea80
SSDEEP

12288:3w73/gVt4Gsd8O8/kIH46+jHd3JUSSkxJEWz:3eStdBO8/kIH46+jHd3JURkxr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.06404d460b33568d102ca08c0577c250.exe

Files

NEAS.06404d460b33568d102ca08c0577c250.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ