64163bf6bb6d3b921a82be4ad5a61bd0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

64163bf6bb6d3b921a82be4ad5a61bd0_NEAS
Size

1.5MB
MD5

64163bf6bb6d3b921a82be4ad5a61bd0
SHA1

d0789867003e3a536d5e94e2defca35c9434730b
SHA256

26ba207a8af94788e1e3a1f19adb3f526857b024d809f1534d03d97dfccd4944
SHA512

82bd00fd6373f2e15bb9ce4eea0522fe4d750faef9908d0e420413ef534f9169cf0c017640fd13afd06192213904007c8e45efcc5716ae6e7f0a959da5e9fad7
SSDEEP

24576:g74fPdYsMNwFtJ2aXX9Hu2WlwjZ9PeWswdeZFSH4HpiTMepHwCAPL3LLFNNPesL2:1js/S6pEj0L3LLFNNPesLEUroN5D05nc

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
64163bf6bb6d3b921a82be4ad5a61bd0_NEAS

Files

64163bf6bb6d3b921a82be4ad5a61bd0_NEAS
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Zhong\dingCom\dingCom\obj\Debug\dingCom.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ