NEAS[.]2d28f1411ec0e7d67c22daa2504a8bd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2d28f1411ec0e7d67c22daa2504a8bd0.exe
Size

267KB
MD5

2d28f1411ec0e7d67c22daa2504a8bd0
SHA1

0c6e98ecd298ee3ab0fd5c11d34cc9bb2ec4abab
SHA256

ed56a962f7e622a34995de169ed84d59547d0a3386a486e48939228fe88bc7bf
SHA512

85c2ef5b65e19670eb386d707f49e42a8484658fad5a660eb7f71989320a2de9340e8a51aac6c9d3e06254988a755e300bbb955390aa258ac8f29169bd6adfc5
SSDEEP

6144:YQMmbjV28okoS4oNFctph8ZPwzGlkCtHy8s6R:YWoioS/NAmSds

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2d28f1411ec0e7d67c22daa2504a8bd0.exe

Files

NEAS.2d28f1411ec0e7d67c22daa2504a8bd0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 131KB - Virtual size: 131KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ