NEAS[.]a58bdded6020589a17310794d8e1af90[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a58bdded6020589a17310794d8e1af90.exe
Size

13KB
MD5

a58bdded6020589a17310794d8e1af90
SHA1

61306f6cda2d98a4d991a0190214e4188b61f2e0
SHA256

5c708a6470f37e3fc10bc8958e31234cc02a1e9e93d06d97ff2b17aa5f630902
SHA512

adb294eb9d49281908ae51502466805fb31e9c050c632ed8988cd27c07def3da58e5b7c5c44e4d1cd5e271276faeb1da2748d584588a4b2621b7cc9d8b223172
SSDEEP

192:hA+MGFMT5qPiQBXF2TN+DlwzUBfdz8DoToxadcQSXGUJpavhRPD:e+MGFMlQBgTN+DlwzqfseokUJpGhRP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a58bdded6020589a17310794d8e1af90.exe

Files

NEAS.a58bdded6020589a17310794d8e1af90.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ