NEAS[.]9f8fbb014dc75456d6959ccc00e64140[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.9f8fbb014dc75456d6959ccc00e64140.exe
Size

2.1MB
MD5

9f8fbb014dc75456d6959ccc00e64140
SHA1

22ac96c6f89239d29f6aaa4ca289834bba5076ff
SHA256

a7a66b655224c95e2d637268f8e6affb6a801b6e33f4ef3cfc0376fac06347dc
SHA512

9474cc7e60c33c9de066a44b9119025de1b60430d527b289ca6819e66d05e5dfe68f6c951ec14e09b1f43658d1b34d6c7db3c979f8c95d5a9a560cababfcca68
SSDEEP

49152:xk4fUbHPJ0RlkHV/BaM6Vp65PF4VjXrLZJ:xq6Rlk1/pf5PF4VjXrLZJ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9f8fbb014dc75456d6959ccc00e64140.exe

Files

NEAS.9f8fbb014dc75456d6959ccc00e64140.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ