NEAS[.]9c224df65caf15200ec705110773b520[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9c224df65caf15200ec705110773b520.exe
Size

448KB
MD5

9c224df65caf15200ec705110773b520
SHA1

23960fa1352c5a11335f0d2c9d1f277e5b488701
SHA256

4ac609fa901b6dddaaf783c3b0e0f7174da88540a13a66d7f329385b1284f914
SHA512

a37a4fab3296b38f1c76d7b16193185572cf149d006ddae82956523d11ae52416a4cf5bfb401ff0ea483afa4f5c62dfc3713afa154010f9d48f87b4da61b70a1
SSDEEP

6144:/pW2bgbbV28okoS1oWMkdlZQ5wQGQRe4evdYV9IzppxiB9/NFQcw9RiEdUB9dW:/pW2IoioS6Dk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9c224df65caf15200ec705110773b520.exe

Files

NEAS.9c224df65caf15200ec705110773b520.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 134KB - Virtual size: 133KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ