NEAS[.]cfff05bfae21d19bc5f60e8b306c58a0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.cfff05bfae21d19bc5f60e8b306c58a0.exe
Size

5KB
MD5

cfff05bfae21d19bc5f60e8b306c58a0
SHA1

cc8096445a0295d69d7f56e5f45854f2389f225c
SHA256

1caa4db39c1fafae9de060f23a34ed2b495b8c0745e979d6794f7ac12c44735b
SHA512

6850a6dc39d7c6283294ad6b312a32246c2128858e9448510496f3ba781a0946f8e13533227855a212732582b5a28136ae7313f088d9882c196c6abe434e9a89
SSDEEP

48:SKLA9oyTnXz+ihZjuKED0j9sDqYUmvX7KEz17jhf3BvFQbGZlEjuH:eTnXzvuK9jpcXuEz17jZwaZiuH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.cfff05bfae21d19bc5f60e8b306c58a0.exe

Files

NEAS.cfff05bfae21d19bc5f60e8b306c58a0.exe
.dll windows:5 windows x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 486B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ