NEAS[.]78b48e74828fce01cc26f7c2cd561e40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.78b48e74828fce01cc26f7c2cd561e40.exe
Size

3KB
MD5

78b48e74828fce01cc26f7c2cd561e40
SHA1

464faa7477c32da50e333adecb0ffb76cc35c3cc
SHA256

ae7427f68e0048256912db47c40835e2101b95a97b3fdfc4d4c1d35aa1c3e371
SHA512

d63b80a9e583a0ec8419caa7ee2e02a9ad7d330e82ff0f3ff31d4c1efdecba5246d38bc61435dd3a5c9e56892893928bd6ef586419c56086d52c069ea9a64dd2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.78b48e74828fce01cc26f7c2cd561e40.exe

Files

NEAS.78b48e74828fce01cc26f7c2cd561e40.exe
.dll windows:5 windows x86

0edb7976d2b004634887852fd95b0b95

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
GetLastError
VirtualAlloc
ExitProcess

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 539B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 449B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 136B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ