NEAS[.]c5778794b473ed63408fd18bf2a0aea522769aaa1c03a273941b52de7aea225b[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c5778794b473ed63408fd18bf2a0aea522769aaa1c03a273941b52de7aea225b.exe
Size

372KB
MD5

875de5103e35a6a2d49a30ba11399a74
SHA1

6a05e8dda6a988bacfd971666246c2149b70c636
SHA256

c5778794b473ed63408fd18bf2a0aea522769aaa1c03a273941b52de7aea225b
SHA512

aecc0a4ebda966c15fddf24b334ff77220e7befd688dfa59ddc1aac34860e724f6034eb798ec97d5e651a0b7a8ac60cdf7101bed7daaf9316eeaa7cf9a753846
SSDEEP

6144:22ODQaHe83M3CqJY0NKf26TrMds1njluAhqWZ+pCxtJ7Yw+x4XC0F+1ZK5JqVdt0:22gQaHe83qCV0NR6f1njluAcjsmGNMZO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c5778794b473ed63408fd18bf2a0aea522769aaa1c03a273941b52de7aea225b.exe

Files

NEAS.c5778794b473ed63408fd18bf2a0aea522769aaa1c03a273941b52de7aea225b.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

R4k},I
Size: 308KB - Virtual size: 308KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ