65c8ec1a63b82669421d473acc8737e0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

65c8ec1a63b82669421d473acc8737e0_NEAS
Size

12KB
MD5

65c8ec1a63b82669421d473acc8737e0
SHA1

9a7aebb44ffd6d7188336d5ffc6564e149654096
SHA256

f91f692a8a16c1169597d9bf63ec4b13335959b7d6d8d469b49e4dd0ab21f75e
SHA512

2206e16d85361874d1e4c5de4fefa32aea3b717dd858d752b0cd83ce8f3daf38e962acc9eda22cd70db181956aa233b2fb6a27429deb225800f8f34c9fcc3a89
SSDEEP

384:qL7li/2zMq2DcEQvdhcJKLTp/NK9xazy:0gM/Q9czy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
65c8ec1a63b82669421d473acc8737e0_NEAS

Files

65c8ec1a63b82669421d473acc8737e0_NEAS
.exe .ps1 windows:4 windows x86 arch:x86 polyglot

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

mscoree

_CorExeMain

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ