NEAS[.]41647626805446287269ba74f70bfde0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.41647626805446287269ba74f70bfde0.exe
Size

109KB
MD5

41647626805446287269ba74f70bfde0
SHA1

4b08056fd386f27cc4b60a922306b94e9885b3df
SHA256

30705ca07a87cc23865adcbe6414b82372891af572ebf8350fe47dcc5d037a1a
SHA512

31cc3fa3b12e556f7a870c89c225a06acca53311d928627d8b42c0f012d2e8a23d266a0fb7000bcfb07613785625110b483e426c39bad88207d24177f71d50ff
SSDEEP

768:/8//yIpWfrEHE+s3XBWOa7hXaWL3335m2d8eaa2TQ/YgALzlcAw/Q/3thSZxLMm:/MK3TuE1BWFm2d8MhALzzwU3vSZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.41647626805446287269ba74f70bfde0.exe

Files

NEAS.41647626805446287269ba74f70bfde0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 1024B - Virtual size: 744B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 67KB - Virtual size: 67KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ