NEAS[.]ee1b788ba284cf290e2d6f13afda4660[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.ee1b788ba284cf290e2d6f13afda4660.exe
Size

56KB
MD5

ee1b788ba284cf290e2d6f13afda4660
SHA1

3c6eea28df57638e9c738c6ba4f0b58f17f8a5a0
SHA256

2431b1a57686be0b8f23385aee5227b051317de4492825bdfc7b1c7d7b2fc549
SHA512

b85f137ad41d376b33236220b5ce25dd6ce4f116b5cc21241d681b1bd70a1f7ed8cd3472aa35c3dfc4525aa1b036bed8e02b59d6427771d0e59e72aa182e3dc2
SSDEEP

768:/GCV6O58awRoAvZDV49ieUXgn4SSciyS1gPZ4DLPLJKLiq+l5:JV/lfI1KYefnscpS1gPZ4DLDJKLV+n

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ee1b788ba284cf290e2d6f13afda4660.exe

Files

NEAS.ee1b788ba284cf290e2d6f13afda4660.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 36KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE