NEAS[.]60189cc54be65e9bf7d4826a24094b40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.60189cc54be65e9bf7d4826a24094b40.exe
Size

180KB
MD5

60189cc54be65e9bf7d4826a24094b40
SHA1

1c08fbf4d71f00e0b1faed917597ab2fcbfff992
SHA256

ec947fc250d233057689ccfb497099cd7bfe536de81dc698f7d17f0d4a2eb94a
SHA512

af04c0332b694f4ffd6ecaa827a0a2f8f9697cbe5926709a6b6bd8b2f59e6409f9bbbf74654e76fdc355af45a521e1803c3a84beb557d6195bb010ec8bfc781b
SSDEEP

3072:DtmNPwgL3azfXLXSJMT+dsyZQUeiXUyWmrjeZ3yqoq+yq:3gLyLxZI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.60189cc54be65e9bf7d4826a24094b40.exe

Files

NEAS.60189cc54be65e9bf7d4826a24094b40.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 156KB - Virtual size: 155KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ