NEAS[.]8e4c14378466004983db9158598b4400[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.8e4c14378466004983db9158598b4400.exe
Size

3KB
MD5

8e4c14378466004983db9158598b4400
SHA1

7e7a8adbc515939eeaac8e7345aebaa389bf1f6b
SHA256

3e71c540c84a5c42c7654afd57da4c1ae68c31f89bea8244d81c951e9ae97673
SHA512

00dd8bf8ac1330c40cf4b65b44476617ea4af1e1ff3acb98ee31e89c83a00c78afab63e9773af5f69d51a219f038dee656d829e12dff7715fa02c917bb8242c0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.8e4c14378466004983db9158598b4400.exe

Files

NEAS.8e4c14378466004983db9158598b4400.exe
.exe windows:4 windows x86

4592a51e6fe78d18da25a5d94b0153f1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
MultiByteToWideChar
WaitForSingleObject
GetCommandLineA
ExitProcess
CloseHandle

advapi32

CreateProcessWithLogonW

Sections

.text
Size: 512B - Virtual size: 299B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 640B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ