NEAS[.]f28a7f0b846e21b8ac51d802109d1ed0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f28a7f0b846e21b8ac51d802109d1ed0.exe
Size

144KB
MD5

f28a7f0b846e21b8ac51d802109d1ed0
SHA1

47bbde44c91bb0c32fdca43107b5ae32525973e3
SHA256

a2c4379aafb2fb3e5350843b3aa43f59214084452d32f7ea65ec154bdf8d9da1
SHA512

488e39c4387c2337658199068244ee5c5b61bce23277a0b571fc3d3c5f9c38389a934f0050beb39bac6a941a41c75a80d087cba5d03122b75bc05d22fcca3427
SSDEEP

3072:X/x3RVhdKw1TAGFAcaqgHygzqmUn0zZIyLB6mnj:X/hz/1TPVrgwnRJm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f28a7f0b846e21b8ac51d802109d1ed0.exe

Files

NEAS.f28a7f0b846e21b8ac51d802109d1ed0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ