NEAS[.]5883e1eb4a37ee31116efb7082429a00[.]exe | Triage

Sharing

General

Target

NEAS.5883e1eb4a37ee31116efb7082429a00.exe
Size

915KB
MD5

5883e1eb4a37ee31116efb7082429a00
SHA1

adcca2d794bc820ec017f7ab70e24038c19e1aff
SHA256

0b34063af87d91e998f865a4d8607eda834d02c05675fed4921e3a05b563a0b7
SHA512

8853dc3bd8018c5d63d21390034dfe37271648d2e6fd160948f47a7071a95cbbf3ba84eee694242f9ed8dca9cbb0a12cae89fd3282452c2d18d573166a1aab9b
SSDEEP

24576:nrC8GLIzbcGLEzbcGLIzb2zbvMMHMMMvMMZMMM2XeMkIM7TMMzMMMUMMVMMMYrMJ:eJMMHMMMvMMZMMMyeMkIM7TMMzMMMUM3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5883e1eb4a37ee31116efb7082429a00.exe

Files

NEAS.5883e1eb4a37ee31116efb7082429a00.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 165KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 748KB - Virtual size: 747KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ