NEAS[.]df35b6c8aafc41fd3549f059cc581020[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.df35b6c8aafc41fd3549f059cc581020.exe
Size

2.7MB
MD5

df35b6c8aafc41fd3549f059cc581020
SHA1

9bbf7fc0eb501a54ad7308fc8f199e2be7a97f20
SHA256

b74e3a7f2a217863d121cd4b344e9416312f9387db4c7ee7738d87d69ab8da4a
SHA512

667ef9760f614b320b2efe0632667cbe6416da2ed5b06c12d63c0a467954140aacb48fcebefdd26d0efb3f08dfa9ed13902aa8122daceb8402200d9b6f3db5a8
SSDEEP

49152:9ByT+P66XbOP/ZzA2DItg1Hoaz6wecYfFkURwlhyAuLjf/IVgs9+xP:2TE66yXZ02DwUHoazRofxIhELjf/IVgs

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.df35b6c8aafc41fd3549f059cc581020.exe

Files

NEAS.df35b6c8aafc41fd3549f059cc581020.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ