NEAS[.]4db7bd2eff9cdd9ce3ae7dc9aa3e51c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.4db7bd2eff9cdd9ce3ae7dc9aa3e51c0.exe
Size

5KB
MD5

4db7bd2eff9cdd9ce3ae7dc9aa3e51c0
SHA1

af2c22855d3c250b0d6223f50f0f1cf7aab5af7a
SHA256

0245154e41bb8367e34270c60e3fcaa5b6586bd36ec74e4c6c814e5ee50c12d8
SHA512

28fda5adf8bc421f98e2ff99041b035b8581855c8dc450474700d2152ad5d94a27fcfa20dd6343bc7bd8af8f447466ef45dacb678520cbc5bbcf2f27907d8693
SSDEEP

96:Iw356AzvUZQ78rxrgxV/bhSg1EzkGB87Xpw8S:ZOOo9ryV/bggSzXB87Z+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.4db7bd2eff9cdd9ce3ae7dc9aa3e51c0.exe

Files

NEAS.4db7bd2eff9cdd9ce3ae7dc9aa3e51c0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ