NEAS[.]edfdd360f429cf164188b64a94378350[.]exe | Triage

Sharing

General

Target

NEAS.edfdd360f429cf164188b64a94378350.exe
Size

155KB
MD5

edfdd360f429cf164188b64a94378350
SHA1

3cd099fd972453cd05637f3ad903d5b95e6fae89
SHA256

141a0a131b27dd1231f5a1329e086915786a91b0cb7736520221728719e2af3d
SHA512

11c55ddc6df64ffec65b6197f36e6587a296a592455a354dfa40decb3a2a57e61e1f3892b372aa53d006246551b387737641975d1642286874c4ca6c043ffcd4
SSDEEP

3072:+OGs3byctrAvuuIowqOO28ikgFAE32AM:jAujqOOZu32

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.edfdd360f429cf164188b64a94378350.exe

Files

NEAS.edfdd360f429cf164188b64a94378350.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ