NEAS[.]a923d277a577daf7962f5aa18075c120[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.a923d277a577daf7962f5aa18075c120.exe
Size

29KB
MD5

a923d277a577daf7962f5aa18075c120
SHA1

bff6a494de189ff42c4a80daec1df66253a40718
SHA256

b79fa3551b8cb47f0e5ca2b3965c508609b59fe060ddcabdf882d599b957e307
SHA512

4bd20c5f96f59e85ea5561c576787bf087529a36ca2325c4ce34ac42c9dc1f998b9a34911af4d48ae4302a95f9735b15637da49882c976b6fb5fe7b4312afed0
SSDEEP

384:YKRGqsIHh3DIGPNX+4tdmuQ31PbJG7V5eij/yD:YeGahTIGbUJiLeiOD

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.a923d277a577daf7962f5aa18075c120.exe

Files

NEAS.a923d277a577daf7962f5aa18075c120.exe
.exe windows:5 windows x86

b282149f003df9a84d99ea1a620f6fff

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

cabinet

ord14

kernel32

GetProcAddress
ExitProcess

user32

GetCursorInfo

Sections

.text
Size: 9KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ