NEAS[.]8fd0932ed9e550ec50a5f21ed5ac2c10[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8fd0932ed9e550ec50a5f21ed5ac2c10.exe
Size

2.3MB
MD5

8fd0932ed9e550ec50a5f21ed5ac2c10
SHA1

50de13306e3d7104aa3d59931d65413a7444f273
SHA256

535557787a7fc8e6de8eb788c620be3ecc010f941fd4038a2e21e9a47234c7b0
SHA512

3efb77d5887d04bd90d912a6a99fa6c5d791f1f24145f7c96fe18e73a01401bfde8bf15b2c13e61e4ae06e399f12accd46f3f48453e8a1a609d7ca62f8adeead
SSDEEP

49152:SxzWLnHFLHkJEYoJdXN0BMOwLloBrugXcY/p:lDrJdXN0B7+sOi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8fd0932ed9e550ec50a5f21ed5ac2c10.exe

Files

NEAS.8fd0932ed9e550ec50a5f21ed5ac2c10.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ