NEAS[.]d7e791db31983b3e57784e800e254b7c5da99e4f9f24d80d9152c49897302293[.]gz | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.d7e791db31983b3e57784e800e254b7c5da99e4f9f24d80d9152c49897302293.gz
Size

1009KB
MD5

6af4364154749122d365e14cd9452b74
SHA1

5f2c045f24de799c4b93954049561a21215d7b26
SHA256

d7e791db31983b3e57784e800e254b7c5da99e4f9f24d80d9152c49897302293
SHA512

0d324241270a9fac934f2fb857394b12deedeaf3a699a388797641d500120c052b2d789672a80e4e46d3aa5ba021ecfc017a8c3dd2d793fd2bf7f92b25acbc05
SSDEEP

24576:RKkf6xIKHyZ2zienCRTGsEbx8Lu+nl17JfOaIpXakmW4Al2mU02cELk:Ro7SZ+6k8LblRJ2rmW4Al2v0kY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Products require 0027838.exe

Files

NEAS.d7e791db31983b3e57784e800e254b7c5da99e4f9f24d80d9152c49897302293.gz
.rar
Products require 0027838.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ