NEAS[.]2de2722558e651abe9c7e86ef8f76ac0[.]exe | Triage

Sharing

General

Target

NEAS.2de2722558e651abe9c7e86ef8f76ac0.exe
Size

4KB
MD5

2de2722558e651abe9c7e86ef8f76ac0
SHA1

55bdafe2020eb9ca83a8004e13998fc9cced9d29
SHA256

757d179c20f194d7c7f451ad702c58315d5e91c2ec78b6109bc0717fcea08bac
SHA512

9f944a4a71f52be3a397b03c10058956460cbcdeb2c448ed0f623629be471ef900e7eba4815e72fa87a0d95972343a17f4524820ea69fab238961dac19cb8cc0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.2de2722558e651abe9c7e86ef8f76ac0.exe

Files

NEAS.2de2722558e651abe9c7e86ef8f76ac0.exe
.dll windows:5 windows x86

eee5ab48f9e07352e908d25d6d1264ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameW
CreateFileW
VirtualAlloc
ReadFile
Sleep
ExitProcess

advapi32

RegOpenKeyA

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 587B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 559B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 146B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ