NEAS[.]04e675761219bec9d760c1dbe70e8bb0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.04e675761219bec9d760c1dbe70e8bb0.exe
Size

6KB
MD5

04e675761219bec9d760c1dbe70e8bb0
SHA1

dd6af9febfc82a401a590dd398169209d282a3f1
SHA256

0bdd49240fa9514cabc7d5e164b4acb42294cfdba2007ba732c305dc5d874bc2
SHA512

3567eff6d86ffd9f9689c8ffd9cbf16e11a9f0bbfd41079fa2a782d4192e07d6e74fc7c8d6d6b3d115ff7a985caf7216d66679596dd11bcfb2258aca99a936d1
SSDEEP

96:bfs/8jLUbx/mUnpN6NsHxgp/pbwRIbOBfkBOpobKwNBsPK:sd/hnSqHu/ORIb6/lKBV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.04e675761219bec9d760c1dbe70e8bb0.exe

Files

NEAS.04e675761219bec9d760c1dbe70e8bb0.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ