NEAS[.]97aea52e6e4159fd0e3f1c7505d2ddd0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.97aea52e6e4159fd0e3f1c7505d2ddd0.exe
Size

164KB
MD5

97aea52e6e4159fd0e3f1c7505d2ddd0
SHA1

7b1b65f9f0e179c06510fadaf4f9db6770815e4f
SHA256

bafd8f3d3f0c776567eb1a01c05428440b9c7b70a62f3a309cc6775eea699c58
SHA512

0dc39d89d5247277cb04b09c18c61e137c082ff832a274ddb212fc695c99ed790a34abe56f34627effd6789f8a60f2cd61f9e6c1160a27091fe744736a86c616
SSDEEP

3072:+R5bdbMEXKfqAZhAkXSJMT+mzMLU4Fm1MyWmribwhS0:gm9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.97aea52e6e4159fd0e3f1c7505d2ddd0.exe

Files

NEAS.97aea52e6e4159fd0e3f1c7505d2ddd0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ