NEAS[.]3cedd61842d8ecbe2edce64e0f129a7e[.]exe | Triage

Sharing

General

Target

NEAS.3cedd61842d8ecbe2edce64e0f129a7e.exe
Size

1010KB
MD5

3cedd61842d8ecbe2edce64e0f129a7e
SHA1

d7b988a61b9a470206d71d908400716d3446e6c4
SHA256

ce83b8a87827462b0c1d4e5c388b2d27481e2a9eb49f398ca5e3a658a23e64db
SHA512

29f56157ea2b9ef7af31a9f804c8a471687e2f3142f049ce3df30d2dc04219c518d518a0d6c3872da54eef2ce435304fa92146a7f59c846c7c7b54f46c15ba06
SSDEEP

24576:RDJYK8E4HV8NdeSJ17nytoLNGk8e1HNP9+pYy295NGnFb+oHxRX5x9:RDJT8rVAdVytWMQkYy29vuFjP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.3cedd61842d8ecbe2edce64e0f129a7e.exe

Files

NEAS.3cedd61842d8ecbe2edce64e0f129a7e.exe
.exe windows:4 windows x64 arch:x64

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1007KB - Virtual size: 1007KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ