NEAS[.]c20c94a19efd3e1322d2a92a74910a70[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c20c94a19efd3e1322d2a92a74910a70.exe
Size

46KB
MD5

c20c94a19efd3e1322d2a92a74910a70
SHA1

526dc8dd663f2d8a71256a6271f896194e307036
SHA256

8c06b569a59b6278d013c0c91cf0bc086b0191f9879101bfdb2267ab83defb91
SHA512

6921c4fddd05fc430cc210cc39049e5d593d664308fd3660bd9705460926ee0ba6eb0bc8e84bccea9c6d5faee1e8b1f0d8a87d77ddfef4a1361868b7ede51fe7
SSDEEP

768:5/RDNg83bNE0nKy/do3Nnk1GpG0NudPC3bJUljV4NHIqyjk5nYcr5BMCq:5/Rxe0KodwkUpG0KPC3lc4qkj5O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c20c94a19efd3e1322d2a92a74910a70.exe

Files

NEAS.c20c94a19efd3e1322d2a92a74910a70.exe
.exe windows:4 windows x86

c0ca8fb524d53a294a75f3adfde9e816

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualFree
VirtualAlloc
GetProcAddress
LoadLibraryExA
GetModuleHandleA
VirtualProtect
ExitProcess
GetModuleFileNameA

user32

MessageBoxA

Sections

$m>e$m>e
Size: - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

$m>e$m>e
Size: 37KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

$m>e$m>e
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ex_rsc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ