NEAS[.]6ea37a446be73d8f7b0b7c6e24550bf0[.]exe | Triage

Sharing

General

Target

NEAS.6ea37a446be73d8f7b0b7c6e24550bf0.exe
Size

180KB
MD5

6ea37a446be73d8f7b0b7c6e24550bf0
SHA1

ee2ae516869455e6c4df4e752b5096b3fe9c85bf
SHA256

81989d5b44a1ba90d3d3a9d92dd3aeef4742577d396a9e47817812dfe78ec510
SHA512

c9d2735276b19c78201082e290dc45b249ca92bbab9c6a1cf3281d47f2cbceb0694db168a4eac054e2183856705b8081223cc4a44042e39da7be2f675b5241dd
SSDEEP

3072:YGoCDQHaRK6f8J2faAXSJMT+dsyZQUeiXUyWmrjen5qoq+yq:F46fOAxnP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6ea37a446be73d8f7b0b7c6e24550bf0.exe

Files

NEAS.6ea37a446be73d8f7b0b7c6e24550bf0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ