NEAS[.]824c5fbced0fe65da853018c99f8ee40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.824c5fbced0fe65da853018c99f8ee40.exe
Size

84KB
MD5

824c5fbced0fe65da853018c99f8ee40
SHA1

d36ed145704c4d8d47033f4fb12223ada80644ae
SHA256

fe1a86591c2f89d5513126c696d8cfbe4e603e184d13adc2941095c2ef7ac825
SHA512

75d82791a1fb098c9828623842c159c8218be541fc3288d47dbfe9eb18a60801f1a42307bc47fac95ec4d125960c3b44792a5458c3e0c4f764d468d62178b148
SSDEEP

1536:x0YA3uv2mKEPy3YIBBMXf4Ey1VwLRuEe4AYVEt4AQTGNopjDoSzI9hrdNB:2MemK4y3YIoXfgSHHFVEtxuyDTB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.824c5fbced0fe65da853018c99f8ee40.exe

Files

NEAS.824c5fbced0fe65da853018c99f8ee40.exe
.exe windows:4 windows x86

dae2264e721d7c66f7fa35e864d11aba

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

kernel32

HeapAlloc
GetProcessHeap
HeapFree
GetProcAddress
LoadLibraryA

Sections

.naked1
Size: - Virtual size: 156KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.naked2
Size: 77KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ