NEAS[.]c93be078f673a553aedb9954939519c0[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c93be078f673a553aedb9954939519c0.exe
Size

81KB
MD5

c93be078f673a553aedb9954939519c0
SHA1

35f763f0e2174ecf8eb2b708f08c4e3fbbbb6bbe
SHA256

8a13e7b5484e1ffdb073355e823515b10e2a7f239a82aa7b84eea332380b0a6e
SHA512

6a86ea7a2931d5d88670912b8ac2b3369f57d682473ccab6bcbcbd35fece8f391dea056e871970f87f23eb8cb0ac9a359a8593bbcd0b15979cca033793205e32
SSDEEP

1536:eNHCDLiTEeX3rIyFCs3N8aLnfi6CaEVjfZfzoo7F:e+uQeX7IGCsXfi6ZEVjfZ5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c93be078f673a553aedb9954939519c0.exe

Files

NEAS.c93be078f673a553aedb9954939519c0.exe
.exe windows:5 windows x86

b892955ae494fe908bdf52e81e1dfa4c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleA
GetProcAddress
VirtualAlloc
VirtualFree
VirtualProtect

user32

EndPaint

advapi32

RegCloseKey

shell32

ShellExecuteA

ws2_32

WSAStartup

iphlpapi

GetAdaptersAddresses

Sections

sdfsdhff
Size: - Virtual size: 164KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sdfsdhff
Size: 75KB - Virtual size: 76KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE