NEAS[.]044dc2891fc94be8e6a7d250f9887d20[.]exe | Triage

Sharing

General

Target

NEAS.044dc2891fc94be8e6a7d250f9887d20.exe
Size

4KB
MD5

044dc2891fc94be8e6a7d250f9887d20
SHA1

4d509dc424333f5377c6e88d73ea5ce2ce2d40f3
SHA256

72d018d347a8c0c6d448120b0e6645336f6849b3fdcc8cc7ce412bd42759b84f
SHA512

5c2ae7ace929a41dde3f8ad85524bd0090e39b9ef6a04c42fe0714568ca298b8211422346bb1007defd4028683aab25abb12c46972dadb63bc4ffe64af109711
SSDEEP

48:6pO6uk0gf5Ttz5etO6WHJdQ2jTPhO0U2HZWS+KU9XP965Wh:4ukhRtz5YnGQ2jTpI25Wl3dP4W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.044dc2891fc94be8e6a7d250f9887d20.exe

Files

NEAS.044dc2891fc94be8e6a7d250f9887d20.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ