NEAS[.]0147faabbe8b56d4eaa0de3d9f9a6860[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.0147faabbe8b56d4eaa0de3d9f9a6860.exe
Size

84KB
MD5

0147faabbe8b56d4eaa0de3d9f9a6860
SHA1

9f51a568e22311c93a7ed0db4828b05d655a8556
SHA256

c36d3b529efb7aad983f82f94b8a7ceb053d3b49d33fae425da0a821faf43a6c
SHA512

5ac9963f32d6a7ba08b47c98fc81b9f10c51c42f09bc61e58f98ebc5d4f9c8f6f72f2ecd0bcdca3e662e5f581e51a675f50b549c9eb2666c2e221b13a566cbdb
SSDEEP

1536:z++mIpcQnCyfVIzFGMXRXe8WvE9w0Ff74RmFRKlUK7BY:zLmMv9YJhOgq0Ff8RmFR+UK7BY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.0147faabbe8b56d4eaa0de3d9f9a6860.exe

Files

NEAS.0147faabbe8b56d4eaa0de3d9f9a6860.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 72KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ