NEAS[.]193ceafc6e925d55b2816fe484a47cf0[.]exe | Triage

Sharing

General

Target

NEAS.193ceafc6e925d55b2816fe484a47cf0.exe
Size

2.1MB
MD5

193ceafc6e925d55b2816fe484a47cf0
SHA1

df1832e3ba8a672b702bb088c60e99734cc79603
SHA256

31b7173fd8c327cd692c27e417957d52d763f3b79c01cab829170bdb0fe27d97
SHA512

f944034414a4bcecb27af9a185d98848f162ee3500a68defa3072644f3cb2f6e8b595e68ac1a32e9040508c25aff4234ec29f9da19173545fc87a2bddf2d0bfa
SSDEEP

49152:Gx7Clvvd3yQlG4sHKrL+nRDvWtwIuPrnwW9XA0HPKSkBgHKMRmz:Gx+vvVyeGBZstUrnwW9hHPKLARmz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.193ceafc6e925d55b2816fe484a47cf0.exe

Files

NEAS.193ceafc6e925d55b2816fe484a47cf0.exe
.exe windows:4 windows x86

66cd896c4c54f71ea91545a1e3b06e32

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
LoadLibraryA
VirtualProtect

msvbvm60

ord582

protectstorage

Transfer

Sections

.text
Size: - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.grd0004
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 30B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ