NEAS[.]08cd5b3ebcb60072212eced5034e3730[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.08cd5b3ebcb60072212eced5034e3730.exe
Size

6KB
MD5

08cd5b3ebcb60072212eced5034e3730
SHA1

856512dcc2f525348b8d9aab35e2de1c901d6693
SHA256

5100ee8224d86154ba0f51c6db93f8b20ddb1730de9c677f1977bb15c7978da4
SHA512

6565b91b8d1bbbc005f17f6e218eae9654f01813314927ded76fd4350fb70eff7b37dc7843c023e181238e7b5a7a7e145ee7c1306069c2016b046b59c7e76138
SSDEEP

96:kfs/8jLUbx/mUnpN6NsHxgp/pbwIbM/kBOpob/wNBsTTKo:3d/hnSqHu/OIbUoKBV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.08cd5b3ebcb60072212eced5034e3730.exe

Files

NEAS.08cd5b3ebcb60072212eced5034e3730.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 680B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ