NEAS[.]b0e7f4e2d791636a4964123119f52240[.]exe | Triage

Sharing

General

Target

NEAS.b0e7f4e2d791636a4964123119f52240.exe
Size

236KB
MD5

b0e7f4e2d791636a4964123119f52240
SHA1

85d12b721f1d36ca8d8a5104307438bd03de8d30
SHA256

2a6ae3e178f63970cd91f853f8d3ba346a051c154e1ee9919599e0f81a91a278
SHA512

bd0dc15f0e0394747a21afa934fea588b1a424511f786b03ee75fa707d0b5cfa1ea21c13c799eb46740288505f09516fb9d6a941a20c1bba8fe7cfe6ede792b7
SSDEEP

3072:mubYCQoRX24pQd6RtiNrs0gUsYq6nSEl3Q62WEFvXSJYDrx9ikk6SS0zuj3:zbYz9aZRogUsYtl3EKW+TS0K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b0e7f4e2d791636a4964123119f52240.exe

Files

NEAS.b0e7f4e2d791636a4964123119f52240.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Exports

Exports

CNB_nosio_Cstarl
Kballkta_Reyources
Sqsyem_Dataata0201

Sections

.text
Size: 233KB - Virtual size: 232KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 157B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ