NEAS[.]5ddc8c708a25a02b11fcb9bd80dac810[.]exe | Triage

Sharing

General

Target

NEAS.5ddc8c708a25a02b11fcb9bd80dac810.exe
Size

221KB
MD5

5ddc8c708a25a02b11fcb9bd80dac810
SHA1

8d63ada8ce5cb601e08f4401b4565ce47aea57b6
SHA256

6d14030573c31bd03d59230baca9583b297b6d893a54a7ef1e5d7a6c7b15c860
SHA512

852f396a12bb783132d1a4f51db1c36d71f1bf5cb9c22854742b4f77b8286b40f997bc7f5ba7382e2edb26387aac23be7e008bbee2d0a666cfc54eef82b71029
SSDEEP

3072:vMZSE872f0+hkJBeY7YwnUZ8+dC7OKOR7Yn2uYCsnOHPuB6s11mGZGW+g:kZSE8UGJwiYwUfWeR7oHYnOW111mFW+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.5ddc8c708a25a02b11fcb9bd80dac810.exe

Files

NEAS.5ddc8c708a25a02b11fcb9bd80dac810.exe
.exe windows:4 windows x86

4517235d6f012421e28370dfa4e6f8c4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

ole32

CoInitialize

rpcrt4

RpcMgmtEpUnregister

Sections

.MPRESS1
Size: 165KB - Virtual size: 264KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE