45847741300d609be47110dc5680f080_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

45847741300d609be47110dc5680f080_NEAS
Size

12KB
MD5

45847741300d609be47110dc5680f080
SHA1

84a3e9b28c1094d5003d1c78966c058b30e0f30a
SHA256

393b306f534325de68084b40ad6b9551b4b01218a74e20defbacee39e36de7d4
SHA512

b71c5a6303fd365253b969733cb0d129c4413bdc1a8a0c72fd536b0352950ffdfc1de0e4840cf8e93b12d05d78dd53791ad189ecb86606b78330b2e04475dbdd
SSDEEP

384:FL7li/2zyJq2DcEBvdfcJKLTp/NK9xaKu:F0DZQ9cKu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45847741300d609be47110dc5680f080_NEAS

Files

45847741300d609be47110dc5680f080_NEAS
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ