NEAS[.]c66d82975da4d1dfa48473adba178b40[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

NEAS.c66d82975da4d1dfa48473adba178b40.exe
Size

143KB
MD5

c66d82975da4d1dfa48473adba178b40
SHA1

ba42d05f5b18d1847d54c98719f28c04f94f8be5
SHA256

c7751d92ff0eabdac47deb61d6b1da99494faaabe1ae158901882f6c8cb29320
SHA512

95c3b408dafac3ca38c7dc286fef93839f6c65b7f3fd8233653fce69fe1b027a5bd1f6db0eedff59e5fa27097c0cf5185d4e077456df65e14a5401039a5570e1
SSDEEP

3072:fuyWfGY25kZOwy/cG+gsuFoCU6JtYXSqEL8K+sP2BuHJTaNlhfVNr:6LxZI/cGJsuFHVnYCN+sP2BuHJON7fVl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NEAS.c66d82975da4d1dfa48473adba178b40.exe

Files

NEAS.c66d82975da4d1dfa48473adba178b40.exe
.dll windows:4 windows x86

79b3362178937bf9559741c46bb9e035

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleHandleA
GetProcAddress

Sections

.text
Size: - Virtual size: 130KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: - Virtual size: 16KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: - Virtual size: 29KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fsesdf0
Size: - Virtual size: 84KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 7KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.res
Size: 142KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ