NEAS[.]551d883bdc28b7156ec1ff4884e944d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.551d883bdc28b7156ec1ff4884e944d0.exe
Size

7.5MB
MD5

551d883bdc28b7156ec1ff4884e944d0
SHA1

4d41b77ddf97bb3d1b06af996a7734249e450284
SHA256

a35d1e4e5339a9568a2ef066a66ece7a9c95dd130993789a2d980719d5151f20
SHA512

18ea69045f459de4115e133ceaf4c0989162617f52c2c6ae8c97282507159146bedfd7191d86128477c3f97e5911b9842c79501cb18305f2c77bcd308a793231
SSDEEP

196608:LspMRop2WowlB2sDfD+g+Sq/rUdDH60IXeDn3Se:LuMRe6wz2sDf1+Sq/4a0IuDn3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.551d883bdc28b7156ec1ff4884e944d0.exe

Files

NEAS.551d883bdc28b7156ec1ff4884e944d0.exe
.exe windows:4 windows x86

24e9847556165b7ef80ade7e7e10fafd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA

user32

CreateWindowExW

advapi32

GetUserNameW

shell32

ShellAboutW

mscoree

_CorExeMain

comctl32

DSA_Create

Sections

.rdata
Size: - Virtual size: 11.5MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.shared
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 103KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE