NEAS[.]f0f01c313c4e5d77ddc3062223cc7df0[.]exe | Triage

Sharing

General

Target

NEAS.f0f01c313c4e5d77ddc3062223cc7df0.exe
Size

34KB
MD5

f0f01c313c4e5d77ddc3062223cc7df0
SHA1

c7e126d899656e1fdd6c089c35436cb5375ef477
SHA256

243b34061c7194fa0dfd135b950c97839128aab8fd31ac806c70dc37ef883436
SHA512

b9eeae593646220520aebcd4e9b2e17f3a347315fc724540bf283737c0294df2feb64ff929e880c254237f5e5fc7fbeff44a00b25f4517a4f43d15e38190e0a6
SSDEEP

768:jCH9hFht8zAhwtAOknvQj/2T10CtyD+9JIwcaQhkanX:jCnFc4wtYnvQj/2R0CI+9dz1YX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.f0f01c313c4e5d77ddc3062223cc7df0.exe

Files

NEAS.f0f01c313c4e5d77ddc3062223cc7df0.exe
.exe windows:4 windows x86

3c0e70bfa5f73f1f1cef484e2bcb5bf8

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

GetModuleHandleA

user32

MessageBoxA

Sections

CODE
Size: 17KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 12KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE