NEAS[.]c865c0a08f63c88f922bee666135cb30[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c865c0a08f63c88f922bee666135cb30.exe
Size

84KB
MD5

c865c0a08f63c88f922bee666135cb30
SHA1

9833432c25b28ca3ac2f4309a870c9f7a4ded6ab
SHA256

2591c761bfa57c8fc3fb1187232519920ce349ca27ef514806687e65645a3d46
SHA512

41cd17507aef7c25dc8cbf7562bf016e949986399fe96b6c5454392728c846558edf0de20c39d2efa6a3c967e86d34dedfccd78a932155fe2cd297949321b467
SSDEEP

1536:Y5kSRFL6s2H6Yc3i4bkc5cG3v3DqSsg3qClQX2oooD+AyxArwIVJ9dMNM:YZzL6sDYdsn3vsga8QXMmwI/wM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c865c0a08f63c88f922bee666135cb30.exe

Files

NEAS.c865c0a08f63c88f922bee666135cb30.exe
.exe windows:4 windows x86

5a498eee87e4d89512a84502f500181f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetProcAddress
GetModuleHandleA
LoadLibraryA

Sections

.text
Size: 36KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 8KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE