NEAS[.]09c494ad5580c75e33125f50aea4dd70[.]exe | Triage

Sharing

General

Target

NEAS.09c494ad5580c75e33125f50aea4dd70.exe
Size

240KB
MD5

09c494ad5580c75e33125f50aea4dd70
SHA1

f36abd0c29ad08888dba961c8a9b80033d5c04f3
SHA256

c678f146e2d487b17f01a5df7ca3d77c82ea820ac747d35812625a08e932d9bb
SHA512

d23e7d9e14feaadd0374f364aa0f23977d589b0b5cf4b01dcc1ec1ea2696b1afc37000b19075e9cb213062578752a71eaa3eff535b1948d9a65aa0cad44b97cd
SSDEEP

6144:L0Bj5iNx7wgwegYwvcgddgDgm9aFb6ROwgHp6F1Q:Im9hF1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.09c494ad5580c75e33125f50aea4dd70.exe

Files

NEAS.09c494ad5580c75e33125f50aea4dd70.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 92KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ