NEAS[.]6e0c083fe8a645702b25250e5fe34020[.]exe | Triage

Sharing

General

Target

NEAS.6e0c083fe8a645702b25250e5fe34020.exe
Size

36KB
MD5

6e0c083fe8a645702b25250e5fe34020
SHA1

718189e9aeec6f513b3d3ecb74853cb451f4f055
SHA256

2f0c8d7aaae2737c63df2167edce93bf259c59747cf98228ed6d96544cf2b53b
SHA512

511b11c29b98f3531582643dc8c4d85574ed92e5671d488487ac75c557a64d7fa1e96e711ae0d639cdab10afb3cb2f093bd5a16f89a90f1ec4e18bbddb120097
SSDEEP

768:73s58nZYQE68VosOYKCmDEwVvpiWQ6/F+G1b8XhAfUqpGz:w52aQE68VZKlDRiWQQbyGCz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6e0c083fe8a645702b25250e5fe34020.exe

Files

NEAS.6e0c083fe8a645702b25250e5fe34020.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ