NEAS[.]b1deecf592585c2bbc173404c10f4510[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b1deecf592585c2bbc173404c10f4510.exe
Size

3KB
MD5

b1deecf592585c2bbc173404c10f4510
SHA1

d596d1ad46554057c6ad13777e0dc50c0a9524c2
SHA256

368f5ceb9e8bfcc85d3baea8f040b3be963caa43d10fc35ca413fb0d79a000ec
SHA512

c84e7bcb01200afe0648ad4b46fa99d01f9fc07fc2cbf73e851242c53b4d8b0eea11622964cb1515dfa0c6773e67f67786d49ef8660548fb3d2870b399fe218b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b1deecf592585c2bbc173404c10f4510.exe

Files

NEAS.b1deecf592585c2bbc173404c10f4510.exe
.dll windows:5 windows x86

e97a70102cce77bfe0dc571cb46a4352

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CreateFileW
VirtualAlloc
ReadFile

user32

MessageBoxA

shell32

ShellExecuteW

msvcrt

_adjust_fdiv
free
_initterm
malloc

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 482B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ