NEAS[.]5bc93c02eb15318bd8a7617ce58b8410[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.5bc93c02eb15318bd8a7617ce58b8410.exe
Size

570KB
MD5

5bc93c02eb15318bd8a7617ce58b8410
SHA1

5fbc327cd3fce965840ed597357bfc0674b3e212
SHA256

7d7626d8fc0749b64a51d688e0708cbcd6fa25b61ca457e88516ed977bd3c045
SHA512

827da2a7b8bf8762e0b18d11bd28df0be70ead4c615d98f2204e3cd709ce0a6ae3a6426ade7fd0108cc3d7a932f9efe05b90edaab9ab13031084f89a5db2514a
SSDEEP

1536:QNpkA2+8J4uykTo4R4O4CI444z44444z44444z44h4z4444D4444z444444U4D4u:opkA27J4uyks9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5bc93c02eb15318bd8a7617ce58b8410.exe

Files

NEAS.5bc93c02eb15318bd8a7617ce58b8410.exe
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 297KB - Virtual size: 297KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 272KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ