NEAS[.]9cba259674966355ff5c2671310d8030[.]exe | Triage

Sharing

General

Target

NEAS.9cba259674966355ff5c2671310d8030.exe
Size

78KB
MD5

9cba259674966355ff5c2671310d8030
SHA1

e8a01eedf03fdd81688b91c6b997a946cc24a905
SHA256

2114da0a8d35977eaf8675bb8bb0298c334e25012f64788985627d9b14277f9a
SHA512

8b74d83ec3d86480795629022f51754cb27c3bbdecb8fe5442d753bec38518fbf911a1275d421647633e4c9a883e0e4a9530cde67bfe87e4ee44b3f273db3a7e
SSDEEP

1536:tY7WfFnMoBjfem+t4CKAqqNvrFqdtw81uEcqkMZV4xHuNn:SCfpMoBjft+TfqqNvQdeKk44puN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.9cba259674966355ff5c2671310d8030.exe

Files

NEAS.9cba259674966355ff5c2671310d8030.exe
.exe windows:4 windows x86

820ab24e53af2dbafc74d24f87e40262

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

MessageBoxA

comctl32

InitCommonControls

kernel32

LoadLibraryA
GetProcAddress

Sections

.perplex
Size: 45KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.perplex
Size: 6KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.perplex
Size: 7KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.perplex
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE