NEAS[.]2838552d18c1b1b354abc1b1e1602c60[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2838552d18c1b1b354abc1b1e1602c60.exe
Size

6KB
MD5

2838552d18c1b1b354abc1b1e1602c60
SHA1

af103f4e0377fa7056fb6918ffdd089c474220d7
SHA256

746960ad0574e6c3eb7d38e2b7a6ac87b421eddb423e684cb6bf17cd96ea9a59
SHA512

442f17d07e2b53dc31c530a40068f4f84b31958b0d23275f75963d894621efe598a6813588506046fb99fb22031c40d9aa8c655a47010b558e575ef5abdbee24
SSDEEP

96:VGS3J4VYR4FOOjkqebjM1G1AKQA8HieZp9kRSf:QS54Bjfe3M1G1TkHiuWwf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2838552d18c1b1b354abc1b1e1602c60.exe

Files

NEAS.2838552d18c1b1b354abc1b1e1602c60.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ