NEAS[.]e5ee8cf4b5b202b962b08a7e1d268bd0[.]exe | Triage

Sharing

General

Target

NEAS.e5ee8cf4b5b202b962b08a7e1d268bd0.exe
Size

252KB
MD5

e5ee8cf4b5b202b962b08a7e1d268bd0
SHA1

afdd293b0f08385d98e96e35fb10d192ce8501f4
SHA256

7a975d25779a60beb60afef9018cd6ae2623d00bdb05a48605ed892db52428f9
SHA512

f508d19418c69efa1d18a8b0b185b57463c62bf28d8610eb267ce85859905a4fa4b1d37a325658ae69721e2d7680045637c3998e03b63e2e757c1f199714591f
SSDEEP

6144:booRdUgFr8cBBOACJ2RqaTaADctHH5b2oHRTlMSQN3ocz1y:UoROgFrnWACJTHqSHH5iEpWS4jy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e5ee8cf4b5b202b962b08a7e1d268bd0.exe

Files

NEAS.e5ee8cf4b5b202b962b08a7e1d268bd0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 249KB - Virtual size: 249KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ