NEAS[.]1c92825091f34a19285361e236f31660[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.1c92825091f34a19285361e236f31660.exe
Size

180KB
MD5

1c92825091f34a19285361e236f31660
SHA1

dae34f0d49f8c2d0ba8678d1a2c8eee229300280
SHA256

14c12792e6aa87e09a088e3a8aa3e800250c553d67b66105b61ade99000aeab3
SHA512

146bfb175431b7b601040b796c14322f8840bfb591870d226ad1aa18cb6055e6444831bdba5e3a7469b8e3d0c8fadc2aab8ef86306e10105a08eff4c795daeb0
SSDEEP

3072:2QCEJbASQfLKEmMFuSnoOIl+XHezswFV3iyngVHwmYsmvpvg7sECsjCnZFoDLrhv:aSVESS3BXHeQeiyEJmva7Jjrxk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.1c92825091f34a19285361e236f31660.exe

Files

NEAS.1c92825091f34a19285361e236f31660.exe
.exe windows:4 windows x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 68KB - Virtual size: 132KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 100KB - Virtual size: 276KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE