NEAS[.]ff833936651831d850b64e034cea0e60[.]exe | Triage

Sharing

General

Target

NEAS.ff833936651831d850b64e034cea0e60.exe
Size

132KB
MD5

ff833936651831d850b64e034cea0e60
SHA1

c1253a4eaf544da51e765d01387ce80947714ede
SHA256

6c8f73839a6851b722e3a3ec39db937fc61643bf0cfe521e6a359ada043740ea
SHA512

6d4751975492328676c3421c348dd492a6c913104e5a31204342e91d2c77a464242e42b439a2b596c00690ec12d312dcd542b1aa8cdde8fc0a49aa7d18deb0b7
SSDEEP

3072:xvFUa0b8w7wTKGR5qoFKnaymV/atYdkGT0CUuS4hsD4ruw8:xvFUfITHkLMLss58

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.ff833936651831d850b64e034cea0e60.exe

Files

NEAS.ff833936651831d850b64e034cea0e60.exe
.exe windows:5 windows x86

d40391ee5183450092ed26706cbedad8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

user32

EndPaint

gdi32

SetBkColor

advapi32

RegOpenKeyW

msvcrt

exit

Sections

.MPRESS1
Size: 125KB - Virtual size: 360KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 552B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE