NEAS[.]857a060a5278ebc6f054452fb3b471b0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.857a060a5278ebc6f054452fb3b471b0.exe
Size

190KB
MD5

857a060a5278ebc6f054452fb3b471b0
SHA1

f9f5611155d9b35189362e9487d3530522d2a03d
SHA256

efe82d67667f0beed9519c3f9f7078954144ab85bd5956528b20e216867fa851
SHA512

3fc1c668f422c659b5ee4e6057921f5b5e353e11168cd45afd03610aaf8bd0e20dbd5ac5e10c186c2ac01efdba7b57d3e5be4eb88d147adf5464eb83261744fd
SSDEEP

3072:1Eef4ygtCYaDSI8l0nh7ySvmxxpIPg4Cn4RpHwhGqM:1EeQ9da+aGSv/Pg4+4Rqh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.857a060a5278ebc6f054452fb3b471b0.exe

Files

NEAS.857a060a5278ebc6f054452fb3b471b0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 188KB - Virtual size: 187KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 672B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ