NEAS[.]af85feb20b04767770ec802386c5a400[.]exe | Triage

Sharing

General

Target

NEAS.af85feb20b04767770ec802386c5a400.exe
Size

259KB
MD5

af85feb20b04767770ec802386c5a400
SHA1

ff30a349468638f2f04feadb0314adf20239075c
SHA256

f360274b4cda7c9e7ee4b2561fd1f81e690735fe1b24e62468b0b9fb98e92bdd
SHA512

8840684d3fb6729bbc840ced2e2cd91abe204a6c617b52a1882d55d14dfc6f6518ee4ea4c17d5bd640a18806add9a59e2aadcc3911c7edeaf5840ec7f6074605
SSDEEP

6144:bMVA+ez8eOZrRpHB1p0gHVDyX5vzEYNpGElev:bf+ez8eOZrzHBj9FyZEYHl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.af85feb20b04767770ec802386c5a400.exe

Files

NEAS.af85feb20b04767770ec802386c5a400.exe
.exe windows:4 windows x86

79bb9a83668c1a39e8cd92d95bdf8704

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WinExec
LoadLibraryA
FreeLibrary
GetModuleHandleA
FreeEnvironmentStringsA
GetModuleFileNameA
GetProcAddress
VirtualAlloc
HeapAlloc
HeapFree
WriteFile
RtlUnwind
VirtualFree
HeapCreate
HeapDestroy
GetFileType
GetUserDefaultLangID
GetStartupInfoA
GetCommandLineA
GetVersion
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetHandleCount
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WideCharToMultiByte
GetCPInfo
GetACP
GetOEMCP

Sections

.text
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 823B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 1014B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 239KB - Virtual size: 238KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ