NEAS[.]5f00d7355b303eb16af5d4086c515990[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5f00d7355b303eb16af5d4086c515990.exe
Size

2.3MB
MD5

5f00d7355b303eb16af5d4086c515990
SHA1

177122232db265388f2cf857ea23bd24ef376b83
SHA256

bd088435ed65d77888b9dbede3d134d7e4613e8c387e5082feb70a245cb2038d
SHA512

441a4584ed81f92eaa6fa68e3eea4f4c697283a8af47e925c8cf316da910791988335260d5cde4355959eb11a87396e631a9b7a663e582af929723eb8608270a
SSDEEP

24576:D8KwDyoROZS+NJSSat2ADsZkMcgXzGeCdsamlq/KKVs5/x0reZMM4LQNZy7QiJN1:fwCSv+tOe8LQNZy7Qi/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5f00d7355b303eb16af5d4086c515990.exe

Files

NEAS.5f00d7355b303eb16af5d4086c515990.exe
.dll windows:4 windows x86 arch:x86

dae02f32a21e03ce65412f6e56942daa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mscoree

_CorDllMain

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 704B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ