NEAS[.]ba4740a415d49affb19f5ff3734306d0[.]exe | Triage

Sharing

General

Target

NEAS.ba4740a415d49affb19f5ff3734306d0.exe
Size

607KB
MD5

ba4740a415d49affb19f5ff3734306d0
SHA1

861c5ad2601c2037ee0c6592704e410f37dc5e39
SHA256

b565de34f07642154488e00cac5c1341ecc9075991c8b75a68df1d194639ab7a
SHA512

8919d16f31ee07ce194c79d21fe7a2230564e6480fd8d2f11bfa7c5102a4ced894fadb7e32ffd84da1e153f9fa7f2d24087cef5dc119d7ecda1965ae2c11328a
SSDEEP

6144:CfaA/eDP/+rAm1erTnngqesm1qdUB4xohYPVr9fDQIrylSFuSjbdzX9LWanzO:CCDzsA3nS1q6QKiVslSFuSjbdRz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ba4740a415d49affb19f5ff3734306d0.exe

Files

NEAS.ba4740a415d49affb19f5ff3734306d0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 602KB - Virtual size: 601KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ