NEAS[.]2194c0ee852b69a8d0a399ae7587ea00[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.2194c0ee852b69a8d0a399ae7587ea00.exe
Size

344KB
MD5

2194c0ee852b69a8d0a399ae7587ea00
SHA1

33d9bf6a9881a8fe7ec00c6f941d1371837ba8ee
SHA256

19f1137364871ed2c06d58fe2c56c270b44369559307da5b86dc4da5a36ee580
SHA512

c1d33246ce9ca8484abfcf477dc0de52c9f1e096997ae3ee9678db97909f5306a12042b08827e94a414da824decbdc0dd85602874c77981542abe0535e9b9e3e
SSDEEP

6144:Cqb6qhX4mPU3gxy0ENsQ252eDcB4Yg+Nd7iKTKSgcF3fXiKHtovOAeP:Ck6iphYsQ20eDK4YZcKmSDF3fXl+eP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2194c0ee852b69a8d0a399ae7587ea00.exe

Files

NEAS.2194c0ee852b69a8d0a399ae7587ea00.exe
.exe windows:5 windows x86

55b099990cbb00fed41881dd2fcc9b1b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalAlloc
VirtualAllocEx

Sections

CODE
Size: 41KB - Virtual size: 40KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

DATA
Size: 21KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ