NEAS[.]5ce11cd27e781c9774ea691bdce4b420[.]exe | Triage

Sharing

General

Target

NEAS.5ce11cd27e781c9774ea691bdce4b420.exe
Size

488KB
MD5

5ce11cd27e781c9774ea691bdce4b420
SHA1

af793283a29a5bdacfcb4ddf0a53762846f287fb
SHA256

1437fc5959dfbf6e28cdb1fbcdd6cddd2f371e6fa4cf9f044a9c221026a096bd
SHA512

b888bd9522ffc1059518ab19f7b0674e3c469ad8e552d32789d2c656e54e7173781b913a349a1fc9d2483ce7aac2d4205583e3c39245826a8220cd5ffb25674b
SSDEEP

12288:688JaTCMhtlLmGqjwbZQCu4pn9rsCnd3:68YaCKz9rsCd3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5ce11cd27e781c9774ea691bdce4b420.exe

Files

NEAS.5ce11cd27e781c9774ea691bdce4b420.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 464KB - Virtual size: 463KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ