842fa08375d623018b8cb41f97acb8b0_NEAS | Triage

Sharing

Copy URL Twitter E-mail

General

Target

842fa08375d623018b8cb41f97acb8b0_NEAS
Size

643KB
MD5

842fa08375d623018b8cb41f97acb8b0
SHA1

c0ff0974a2c4dd179f9b493dadf1e39343430a0a
SHA256

397d07535bb76d9d8c4e1f34a67b9e8decb535b88ffacfe2ca378a106ff615d7
SHA512

0fdc8b4c28107b6f433e130aa85f5ed4edc3c591edb98ac06c89fd20bd1aaea1c1ae0bdd8037b757642bf5162205f915718a865296b9d86247f22f114bfc8393
SSDEEP

3072:2gfHehp4CCvK+oFJiKVAU1gzwfTedHChff+o30+GifZR7OyCw6M/CuQp30+GifZf:2kHAyvVoX5AnMlVfbjEVfbjEJN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
842fa08375d623018b8cb41f97acb8b0_NEAS

Files

842fa08375d623018b8cb41f97acb8b0_NEAS
.exe windows:4 windows x86 arch:x86

f34d5f2d4577ed6d9ceec516c1f5a744

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\Users\B0LT\Downloads\ProgrammingStuff\C#\CsThreeD\CsThree\obj\Debug\CsThree.pdb

Imports

mscoree

_CorExeMain

Sections

.text
Size: 373KB - Virtual size: 373KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 268KB - Virtual size: 268KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 12B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ