NEAS[.]6edd0117b1f9037174ac8a9cbd7f2280[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.6edd0117b1f9037174ac8a9cbd7f2280.exe
Size

216KB
MD5

6edd0117b1f9037174ac8a9cbd7f2280
SHA1

bd21682a8347a9f5164a825018b948ea32a859ad
SHA256

64078c097da6b9fe4bffb290961afe0bab94483ecce550aa9eaaa4ef1c32e143
SHA512

5c025f13955458b23478143362df36411583eacb3d1276033a8489704e8552f20026a05f93c8eba28edf431f2d905b2d1124286ee6f1350a86781b85249909e5
SSDEEP

6144:EDsoAhIXCA9P0ngPLW/vLMhT9M7mA7RusZXR9opNC+3:E8CPSAy3wj+lR9Ah3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.6edd0117b1f9037174ac8a9cbd7f2280.exe

Files

NEAS.6edd0117b1f9037174ac8a9cbd7f2280.exe
.exe windows:5 windows x86

09d0478591d4f788cb3e5ea416c25237

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LoadLibraryA
GetProcAddress
VirtualAlloc
VirtualFree

Sections

.text
Size: 186KB - Virtual size: 680KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE