NEAS[.]96af3bcba990937227909bb761191680[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.96af3bcba990937227909bb761191680.exe
Size

209KB
MD5

96af3bcba990937227909bb761191680
SHA1

d957bca66c995805a865a46960c7e428972e10fa
SHA256

a979629cb8d08844d95774985d436a49c013dc4ff391e3ab5f94ab9efb1abe20
SHA512

5826c5e2ec9eed38ec1bec039a9252216fde65a044b635ba5ae8cabd49320fc845c124fd8f23daae207003aecf81241f22a97e0c33fabe6a63acf112c71ce621
SSDEEP

3072:F2m3tbf3626wm3tbfbG28mlnZxV7/brYp:F2m3tbfVm3tbfbSmlzN4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.96af3bcba990937227909bb761191680.exe

Files

NEAS.96af3bcba990937227909bb761191680.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 174KB - Virtual size: 173KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.sdata
Size: 512B - Virtual size: 312B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 33KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ