NEAS[.]404a47fa7d6d76d8d43f4131d3c1d0b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.404a47fa7d6d76d8d43f4131d3c1d0b0.exe
Size

7KB
MD5

404a47fa7d6d76d8d43f4131d3c1d0b0
SHA1

40f13c6ec13f7ee50d48f4d16428de2f8e80de49
SHA256

01c43e5ddf90e11cf785ef12c9891c71a6a9e28ef03ca9356864dda5d8802792
SHA512

07ce5064f3c1bb934ab86ca58fa3841033a983c5b045996f0c7b76876643039e506a13d93bffeac3b0e1b1781b6507c53e387dac29b72734c7b45cac1f14b391
SSDEEP

96:L/8WM7EczEDPo6tHbhSg1EziLwPpG2pMPDuV+Skx:bxM7EcMZtHbggSzkwhGIMrQTkx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.404a47fa7d6d76d8d43f4131d3c1d0b0.exe

Files

NEAS.404a47fa7d6d76d8d43f4131d3c1d0b0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ