NEAS[.]319fed5cd679931c40844b17441c67f0[.]exe | Triage

Sharing

General

Target

NEAS.319fed5cd679931c40844b17441c67f0.exe
Size

281KB
MD5

319fed5cd679931c40844b17441c67f0
SHA1

4d6dd4b7a5a0cc89298333d9dc00a7eb3b57cc0c
SHA256

f666b7551078a21c2bc6b36806793accc598036103697f7aef2759605b76feca
SHA512

a55e6e42e8dd48824c63b12892b7980d0bbf92a0386f5eb4bd97dd51d8ed7d54a48a9025aeb4a213c632eeb81b76f34c7259fc878c7975871acfeaf247a781ba
SSDEEP

6144:qXBo/zgUseQdORs89if/i1eiwNoOfkFo/zTuzI42mx1exVs+:nMU/Q3890EeiQo+T/zTuzI42mx1exVs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.319fed5cd679931c40844b17441c67f0.exe

Files

NEAS.319fed5cd679931c40844b17441c67f0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 279KB - Virtual size: 279KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 688B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ