NEAS[.]b9dd8f5335af1243cfd08b1609c6dff0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.b9dd8f5335af1243cfd08b1609c6dff0.exe
Size

3KB
MD5

b9dd8f5335af1243cfd08b1609c6dff0
SHA1

a1421fffdb859b78cd2c6795d8279a2d094f811c
SHA256

684ae03ca390fde1ed315ca06d0c2c827bd31a1bb1aea6b16b1b664bb0863c4b
SHA512

c7d4e5c7504539616502881dadc6e2902b420b0b3fac22d4d8a8aa9f842c1f37135a9955503b6cc70dfb310abacd9d0cb94258d8adc54e8a6122769e099929d3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.b9dd8f5335af1243cfd08b1609c6dff0.exe

Files

NEAS.b9dd8f5335af1243cfd08b1609c6dff0.exe
.dll windows:5 windows x86

d6a1a6e348d9a34bc0304c5184831374

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ReadFile
CreateFileW
VirtualAlloc

shell32

ShellExecuteW

msvcrt

free
_initterm
malloc
_adjust_fdiv

Exports

Exports

crys

Sections

.text
Size: 1024B - Virtual size: 527B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 130B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ