NEAS[.]f5fc9479dd192651863106f5d2ab1910[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.f5fc9479dd192651863106f5d2ab1910.exe
Size

2.1MB
MD5

f5fc9479dd192651863106f5d2ab1910
SHA1

2ac0635664c0352250012274053134f201b7dd66
SHA256

3623591ce0d162e070f9a57f664846a93f49768d456a5debc4ba0e52ac72bead
SHA512

f613831fac2c0c66203242923cca7dc20f5e19a94d8276c275877aadbce7c88fbcdaa4e62790db046af70dd5449941ec727a1e199762e8e3e27d7087ab0b091f
SSDEEP

24576:MTT8Wjeq9GGEI+odndOtJDOFms5oXGkgEJLy8E8sF0gL4M/PbMwpRCakd/DlkH92:772CJq08o7Z15MFmxc9Juq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f5fc9479dd192651863106f5d2ab1910.exe

Files

NEAS.f5fc9479dd192651863106f5d2ab1910.exe
.exe windows:4 windows x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

_@#ipxb{
Size: - Virtual size: 925KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

|]Gj&:9c
Size: - Virtual size: 202KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

|a1pJbRy
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

gZ*ssCU}
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

*2pF @|
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

?9/]B6Dc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ