NEAS[.]e78fc482761c00e8819be32b22589220[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.e78fc482761c00e8819be32b22589220.exe
Size

33KB
MD5

e78fc482761c00e8819be32b22589220
SHA1

6f49e4f4b019fb5b4ea3fef3a5edf7234f2db276
SHA256

9a501fa531b19059c069a6c2b6f7eb6ad6a7309becfd215d4f2fc7a9570db5f7
SHA512

f9c4356f50334d77028f223e7cbd51f5b1d7f6c3e8046dcf4068cbcb94cf628d8a06ab9c09c1b5a585d7fc340698148af486782cd8547effa504a17c0baf3721
SSDEEP

384:P4YkwwChHnp4ZbwxJyBQsOOWHK7Vm/8ZdtYfs9vwEG9/Xwywq6uJfI2GURwq+wE:PkChHpqwxJpgF7VbX2fUwE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.e78fc482761c00e8819be32b22589220.exe

Files

NEAS.e78fc482761c00e8819be32b22589220.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ