NEAS[.]7baceb05686a1797d773cf7d683886d0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.7baceb05686a1797d773cf7d683886d0.exe
Size

317KB
MD5

7baceb05686a1797d773cf7d683886d0
SHA1

930a3e0aed10dc2b2ba560fa78d585a61aed58a6
SHA256

1aa8d6dbab61a0443a2b2d3043b1f810851aee558f1aee2819a94be7e3807cfc
SHA512

00329e1c2932927adb100beaca6e4ce412daff6650c430e6c46971bb6ac2dae2427e0ee2f720f08e41747530e0fa184cc7cc375e0c5acd3b5cc716fffac0ef3a
SSDEEP

6144:ms40TgX1d7gTf3PTa72UIEUcHwnel28b5:ms40TgFqPP+72UIE/bB5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.7baceb05686a1797d773cf7d683886d0.exe

Files

NEAS.7baceb05686a1797d773cf7d683886d0.exe
.exe windows:5 windows x86

d9035f7f7b589f6a5b3fa10c446cb5de

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MapViewOfFile
LocalAlloc
CreateFileMappingW

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 21KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 165KB - Virtual size: 165KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ