NEAS[.]822475fe98ae0ba3ecedf60bfadabfe0[.]exe | Triage

Sharing

General

Target

NEAS.822475fe98ae0ba3ecedf60bfadabfe0.exe
Size

227KB
MD5

822475fe98ae0ba3ecedf60bfadabfe0
SHA1

8d49a6a4ab9b1a1d22ab2a87dadccb7941c9e94a
SHA256

88b5792b14a432391a62262392dca9920d1d524e69a5fc5c3ecca488f73dafd1
SHA512

2160df19939f21e395977569313e2da655644638687810438b8d84ea128c4c127791418e0588e87137b1db487358879ce82873e4440b0959755cd08c8af9d547
SSDEEP

6144:n4lwZ40243s0gJvyTZaPYZeHF/tIzi+Tk98i9goc8VRt4Yqr:4n0d8PJvyQYZelVIziveo/Rtur

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.822475fe98ae0ba3ecedf60bfadabfe0.exe

Files

NEAS.822475fe98ae0ba3ecedf60bfadabfe0.exe
.exe windows:5 windows x86

8ffc31bccd11f7f873be952d93bdc291

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

advapi32

RegOpenKeyExW

oleaut32

SysAllocStringLen

mscoree

CorBindToRuntimeEx

Sections

.text
Size: 214KB - Virtual size: 540KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE