NEAS[.]c039b66445302d1e42d2423543c800f0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c039b66445302d1e42d2423543c800f0.exe
Size

18KB
MD5

c039b66445302d1e42d2423543c800f0
SHA1

c81d36db467bc40f60ebd5dd37f24dddcdc81ddb
SHA256

833d3f041b45f885306937abaf78011dbb7e4c4ec84bc4cad2dbcf6357e15f95
SHA512

112b24b692e60551852b01a3b362b59fbbdd2bce73182a0375b28598671fc9372928c8195b132c64918d3d4ddd4e6a95ee4f338d2e5d21a60198f9bea4ce4ab4
SSDEEP

384:rCsis7sEsLisheYiszt+Y+Iw4xaXVLze9t8uhK/x:+sis7sEsOsAgCXVL69+gK/x

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c039b66445302d1e42d2423543c800f0.exe

Files

NEAS.c039b66445302d1e42d2423543c800f0.exe
.dll windows:4 windows x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ