NEAS[.]c4330df85077e08d0f0cd9d33561a630[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c4330df85077e08d0f0cd9d33561a630.exe
Size

1.5MB
MD5

c4330df85077e08d0f0cd9d33561a630
SHA1

d99e560a7ebc54924c9b8c562ebd07be8536c319
SHA256

144da5113c69f824a90251d5bb25d25431ce6c08bdc04b6b0b883d223fe0ec95
SHA512

083f2c03646763d127acf42a688f939d2747886506acd17bed4c2462aabbb11b33125419f14ea136d0de987b6b975d9d213cfd5900cc2bc36ca403e923f3bd05
SSDEEP

12288:lXBswZ4JZ4JZ4JZ4JZ4LZ4pA/a7AebZ4JZ4GKE:HsN/af

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c4330df85077e08d0f0cd9d33561a630.exe

Files

NEAS.c4330df85077e08d0f0cd9d33561a630.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 114KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ