NEAS[.]fb69918bc78254e83c18abfbdbe3eb70[.]exe | Triage

Sharing

General

Target

NEAS.fb69918bc78254e83c18abfbdbe3eb70.exe
Size

6KB
MD5

fb69918bc78254e83c18abfbdbe3eb70
SHA1

482f425879413d8f25272d1d9358ac8af567b28f
SHA256

4d92961d5b92b8ef9a602afa654d54ab12c20a9d0c8a5a462863d0bf3c0d1b55
SHA512

a9777d748d77a860cec29ed4d739f79684b1841b6736055c60f5423cd4a70b1f9b6b89495b59d4996c63c259273b6facc451c473dfc270f2fabba00b4556e4ff
SSDEEP

192:/WBawjXw2FxwfewqZwqw7kObYExKVL55M5ru:/WBawjXwcwfewqZwqw7zKD5M5ru

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.fb69918bc78254e83c18abfbdbe3eb70.exe

Files

NEAS.fb69918bc78254e83c18abfbdbe3eb70.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ