NEAS[.]bd738c0899c96227f83702a2eca3fa90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.bd738c0899c96227f83702a2eca3fa90.exe
Size

7KB
MD5

bd738c0899c96227f83702a2eca3fa90
SHA1

b438e2ab9892a6226355f53af2d73c5c5f4bf8ca
SHA256

3ffa93c136d3d83b2a67e841278a710e70dff781d2718af0cfb42b0f24cce16e
SHA512

d3a583ea5b557fa4fea58519ef4634e2379ee585612dea245d3c6de8eff4cf37381e569337e356edac45de0c35710f560154b77ae20df4cb6ac10831c746006e
SSDEEP

96:hj8WM7EczEDq0+TjPSCHbhSg1EzAkdwPpGepMLxeIaS:xxM7EcMqpHbggSztwhGQMF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.bd738c0899c96227f83702a2eca3fa90.exe

Files

NEAS.bd738c0899c96227f83702a2eca3fa90.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ