NEAS[.]e359a6aa1a85d75842bd7942d7de1170[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e359a6aa1a85d75842bd7942d7de1170.exe
Size

40KB
MD5

e359a6aa1a85d75842bd7942d7de1170
SHA1

48b39571841b34ee13f6b973d4c536999495b4e4
SHA256

83c19f2df8d9773b672c6b9cf160dd4e6d34c49fd7d87eddc8bc33b1d46b8c8f
SHA512

309cc3bfedc5671d057d4f008fb5dade5375598ff277efc45fc231a3802f6cebdecc33635a7696156b267d0ad6f91040a2a3ed542db2f19bd511c5dd69bbb913
SSDEEP

768:FlfNgPjvG8hXkdeZSEWBS+Izt2tvoaqLwKk8G:Fl+O8hXgEWCzt2tArwuG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e359a6aa1a85d75842bd7942d7de1170.exe

Files

NEAS.e359a6aa1a85d75842bd7942d7de1170.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ