NEAS[.]b1b7840a85f47492bd18a14f259271c0[.]exe | Triage

Sharing

General

Target

NEAS.b1b7840a85f47492bd18a14f259271c0.exe
Size

487KB
MD5

b1b7840a85f47492bd18a14f259271c0
SHA1

2e4857ca0af00740f2b592eb06607821cef8ecf0
SHA256

b069c79498e11412e2b2725479aee383a1a785c8f2bc32e6bcb0fd78de51f5dc
SHA512

9096bb99397ed9dc7c7fb5118c85e06b80ad7c3b1c1da9b5dbf82446f1f3f37af8bf4638a7b062b16b31a32a113277f94641602c279d702f96acc8983ffef07a
SSDEEP

12288:Pz9ruEtMylb/u7nZxFRD8q4hU0IJDqNC5eR:1uEthl0nRpV0+qN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b1b7840a85f47492bd18a14f259271c0.exe

Files

NEAS.b1b7840a85f47492bd18a14f259271c0.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 469KB - Virtual size: 469KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ